Beyond Cybersecurity: Protecting Your Digital Business - Hardcover

PRAISE FOR BEYOND CYBERSECURITY

"As all companies become digital companies, it will be increasingly important to understand the risks and opportunities of an interconnected world. Protecting your digital assets is no longer a technical conversation alone, but one that should involve the Board and senior executives. The successful companies will be those who create business plans, strategies, and products with security in mind."
—John T. Chambers, Chairman and CEO, Cisco

"This study offers concrete, actionable, and business-wise recommendations to strengthen cyber resilience. The study not only demonstrates the value of targeting investments against cyber threats, but also provides a detailed guide that executives can apply to their own specific business needs and priorities. The recommendations on active cyber defenses and incident response planning are equally timely and compelling."
—Dr. Paul Stockton, former Assistant Secretary of Defense for Homeland Defense and Americas' Security Affairs

"The cyber-attackers are winning. This alarming and much-needed new book argues that fighting back is not just an IT matter but a fundamental challenge for management. The authors methodically lay out a pragmatic approach to achieve a 'resilience' that can keep business safe and our increasingly digital economy humming."
—David Kirkpatrick, Founder of the Techonomy conference and author of The Facebook Effect: The Inside Story of the Company that is Connecting the World

"In the world of digital business strategies, protecting information assets is a board level concern. This book explains why cybersecurity is so important and provides practical guidance about what executives from the CISO to the CIO to the CEO should do to make their companies more resilient in the face of ever more relentless cyber-attacks."
—Terry Rice, AVP, IT Risk Management and CISO, Merck & Co., Inc.

"For all the growing discussion in government briefing rooms and corporate boardrooms of cyber defense and deterrence, 'resilience' is the real magic word in reaching true cybersecurity. Beyond Cybersecurity provides a much needed deep-dive for those who want to learn more. From how to prepare senior leaders to building organizational scorecards to protecting the broader digital ecosystem, it hits all the core points of this most crucial topic."
—P.W. Singer, author of Cybersecurity and Cyberwar: What Everyone Needs to Know

"Today, all organizations must operate from a presumption that their cyber defenses have been breached. This book will help them act on that reality effectively and efficiently."
—Col. (Ret.) Robert Butler, former Deputy Assistant Secretary of Defense for Cyber Policy

If private and public organizations are to survive the ongoing cyber-attacks that put their information assets and online processes at risk, they must build effective cybersecurity into their business and IT processes. Beyond Cybersecurity offers a hands-on guide that includes the practical steps institutions can take to achieve digital resilience and protect against cyber-attacks while creating value from technology investments and innovation.

Cybersecurity must move up the corporate and political agenda if institutions are to remain safe and realize the full potential value of innovation. The authors—experts in the field of cybersecurity—outline the seven hallmarks of digital resilience and offer vital information on how to incorporate cybersecurity into business decision-making. They explain what frontline users can do to protect information assets, describe how to create active defenses in order to respond to emerging threats, and explore how to build incident response skills across business functions.

Beyond Cybersecurity explains how to create an effective cybersecurity program that makes rapid and sustained progress and is designed around three key principles: Encourage collaboration between the cybersecurity team and business partners in order to prioritize risks, make intelligent trade-offs, and change business processes and behaviors, rather than implement technology solutions to manage risks; Focus on resiliency in the broader IT organization to facilitate the convergence of security, efficiency, and agility and ensure that technology platforms are initially designed to be resilient and secure; Upgrade the skills of the cybersecurity team so its managers can understand business risks, collaborate effectively with business partners, navigate a rapidly changing technology environment, influence application and infrastructure environments, and implement active defense tactics.

Using Beyond Cybersecurity as their guide, savvy leaders can improve their cybersecurity capabilities and act in a proactive and determined way.