Overview
- Simplifies the answer to “What is our cybersecurity program all about?”
- Demystifies the “how to” of cybersecurity risk management and the pitfalls to avoid
- Pulls together management, technology, and executive understanding using insightful cyber measures and indicators
Access this book
Tax calculation will be finalised at checkout
Other ways to access
About this book
When it comes to managing cybersecurity in an organization, most tussle with basic foundational components. This practitioner’s guide lays down those foundational components, with real client examples and pitfalls to avoid.
A plethora of cybersecurity management resources are available—many with sound advice, management approaches, and technical solutions—but few with one common theme that pulls together management and technology, with a focus on executive oversight. Author Ryan Leirvik helps solve these common problems by providing a clear, easy-to-understand, and easy-to-deploy "playbook" for a cyber risk management approach applicable to your entire organization.
This second edition provides tools and methods in a straight-forward, practical manner to guide the management of a cybersecurity program. Expanded sections include the critical integration of cyber risk management into enterprise risk management, the important connection between a Software Bill of Materials and Third-party Risk Programs, and additional "how to" tools and material for mapping frameworks to controls.
Praise for Understand, Manage, and Measure Cyber Risk
What lies ahead of you in the pages of this book? Clean practicality, not something that just looks good on paper—brittle and impractical when exposed to the real world. I prize flexibility and simplicity instead of attempting to have answers for everything and the rigidity that results. This simplicity is what I find valuable within Ryan's book. Tim Collyer, Motorola Solutions
It seems that I have found a kindred spirit—a builder who has worked with a wide variety of client CISOs on their programs, gaining a deep understanding of how a successful and sustainable program should be constructed. Ryan's cyber work in the US Department of Defense, his McKinsey & Company consulting, and his advisory and survey work with IANS give him a unique global view of our shared passion. Nicholas J. Mankovich, PhD, MS, CISPP
Who This Book Is For
CISOs, CROs, CIOs, directors of risk management, and anyone struggling to pull together frameworks or basic metrics to quantify uncertainty and address risk
Similar content being viewed by others
Keywords
- Cybersecurity
- Risk Management
- Cybersecurity Risk Management
- Information Security Risk Management
- Board level cyber measures
- Cybersecurity program roadmap
- Cyber Key Performance Indicators
- KPI’s
- Cyber Key Risk Indicators
- Cyber Objectives and Key Results
- Cyber C-Suite
- Practical Cyber
- Executive Cyber Measures
- Cybersecurity Risk Framework
Table of contents (11 chapters)
-
Front Matter
-
The Problem
-
Front Matter
-
-
Back Matter
Authors and Affiliations
About the author
Ryan Leirvik is a cybersecurity professional who has spent the better part of two decades enhancing information security programs at the world's largest institutions. With considerable US government and commercial sector experience, Ryan has employed his professional passion for cybersecurity at almost every level within an organization.
A frequent speaker on the topic of information security, Ryan fields several questions on “How do I make sure I have a sustainable cyber program?” This book was written to help answer that question.
Ryan has been the CEO of a cybersecurity research and development company, Chief of Staff and Associate Director of Cyber for the US Department of Defense, and a cybersecurity strategy consultant with McKinsey & Company. Ryan’s technology career started at IBM, and he has a master of IT degree from Virginia Tech, an MBA from Case Western Reserve University, as well as a bachelor of science from Purdue University. Ryan isalso on the faculty at IANS.
Bibliographic Information
Book Title: Understand, Manage, and Measure Cyber Risk®
Book Subtitle: Practical Solutions for Creating a Sustainable Cyber Program
Authors: Ryan Leirvik
DOI: https://doi.org/10.1007/978-1-4842-9319-5
Publisher: Apress Berkeley, CA
eBook Packages: Professional and Applied Computing, Apress Access Books, Professional and Applied Computing (R0)
Copyright Information: Ryan Leirvik 2023
Softcover ISBN: 978-1-4842-9318-8Published: 14 June 2023
eBook ISBN: 978-1-4842-9319-5Published: 13 June 2023
Edition Number: 2
Number of Pages: XXVI, 223
Number of Illustrations: 71 b/w illustrations
Topics: Systems and Data Security, Risk Management, Mobile and Network Security