Executive
Senior managers, executives, board members, directors and owners of organisations. Also ambitous middle-managers and applicants for senior positions, plus those who interact with the exec team e.g. auditors, consultants, advisors and senior sales people.
The book has value for:
Getting to grips with this technical field.
Appreciating the strategic, governance and compliance aspects, the high-level business perspective.
Understanding the cybersecurity content of reports, presentations and conversations with lower tiers, consultants, specialists, auditors, advisors and so on.
Engaging productively in risk and security committees, workshops, decisions, incident/crisis meetings, strategy away-days, audit meetings, vendor presentations and discussions with various stakeholders on cybersecurity and related matters.
Appreciating the practicalities of managing cyber and other information risks, the complexities and interrelatedness of technological, physical, administrative and legal controls.
Exploring and optimising the net value (benefits less costs) of various security controls, such as policies, insurance and security-related business and information services.