Book Image

Building a Cyber Resilient Business

By : Dr. Magda Lilia Chelly, Shamane Tan, Hai Tran
Book Image

Building a Cyber Resilient Business

By: Dr. Magda Lilia Chelly, Shamane Tan, Hai Tran

Overview of this book

With cyberattacks on the rise, it has become essential for C-suite executives and board members to step up and collectively recognize cyber risk as a top priority business risk. However, non-cyber executives find it challenging to understand their role in increasing the business’s cyber resilience due to its complex nature and the lack of a clear return on investment. This book demystifies the perception that cybersecurity is a technical problem, drawing parallels between the key responsibilities of the C-suite roles to line up with the mission of the Chief Information Security Officer (CISO). The book equips you with all you need to know about cyber risks to run the business effectively. Each chapter provides a holistic overview of the dynamic priorities of the C-suite (from the CFO to the CIO, COO, CRO, and so on), and unpacks how cybersecurity must be embedded in every business function. The book also contains self-assessment questions, which are a helpful tool in evaluating any major cybersecurity initiatives and/or investment required. With this book, you’ll have a deeper appreciation of the various ways all executives can contribute to the organization’s cyber program, in close collaboration with the CISO and the security team, and achieve a cyber-resilient, profitable, and sustainable business.
Table of Contents (14 chapters)

Understanding the collaboration potential between the CRO and CISO

Shamane shares her observation of the conversations she had with various CROs about their interactions with the board: “They do not want us to be afraid of being contentious. In fact, they welcome an alternative view!” Part of this alternative view is to pivot your message from one of fear of threats to one the CRO can use to better inform their risk management framework/analysis/taxonomy.

CROs have observed that CISOs can use threatening language to scare the board of directors into a decision. However, from a behavioral and psychological perspective, fear only drives irrational decisions that do not pan out well in the long term.

One such CISO reported during a management meeting that cybercrime would be the third-largest industry in the world within a few years. The CISO did not support these claims with facts nor provide an analysis of the consequences. It’s then unsurprising that the...