The cyber risk handbook : creating and measuring effective cybersecurity capabilities

Intro -- The Cyber Risk Handbook -- Contents -- Foreword: The State of Cybersecurity -- About the Editor -- List of Contributors -- Acknowledgments -- Chapter 1 Introduction -- The CEO under Pressure -- The Need for a Cyber Risk Handbook -- Toward an Effectively Cyber Risk-Managed Organization -- Effectiveness Is All About Doing the Right Things -- Handbook Structured for the Enterprise -- Conceptualizing Cybersecurity for Organization-Wide Solutions -- Theming the Right Set of Capabilities -- Cyber Risk Maturity Model Measures Improvements in Capabilities -- Handbook Structure, Rationale, and Benefits -- Balance and Objectivity -- Enterprise-wide Comprehensiveness -- Moving Up the Risk Maturity Curve -- Which Chapters Are Written for Me? -- Chapter 2 Board Cyber Risk Oversight -- What Are Boards Expected to Do Now? -- The Short Answer -- What Barriers to Action Will Well-Intending Boards Face? -- Barrier 1: Lack of Senior Management Ownership -- Barrier 2: Failure to Link Cybersecurity Assessments to Key Organization Objectives -- Barrier 3: Omission of Cybersecurity from Entity-Level Objectives and Strategic Plans -- Barrier 4: Too Much Focus on Internal Controls -- Barrier 5: Lack of Reliable Information on Residual Risk Status -- What Practical Steps Should Boards Take Now to Respond? -- Practical Step 1: Use a "Five Lines of Assurance" Approach -- Practical Step 2: Include Top Objectives and Specific Owners -- Practical Step 3: Establish a Risk Management Framework -- Practical Step 4: Require Regular Reporting by the CEO -- Cybersecurity-The Way Forward -- About Risk Oversight Solutions Inc. -- About Tim J. Leech, FCPA, CIA, CRMA, CFE -- About Lauren C. Hanlon, CPA, CIA, CRMA, CFE -- Chapter 3 Principles Behind Cyber Risk Management -- Cyber Risk Management Principles Guide Actions -- Meeting Stakeholder Needs.