Cybersecurity Technology Management
摘要
In this chapter, we define and explain the concept of Cybersecurity Technology Management (CTM) and how it applies to cybersecurity governance. CTM is a multidisciplinary area of study that embraces engineering, science, and management disciplines to design a set of rules and procedures for technology utilization to develop, maintain, and improve a company’s cybersecurity and competitive advantage. Because IT is such a powerful force, CTM emphasizes the governance policies and procedures for efficiently applying risk control processes and technologies to meet organizational objectives, boost revenue, and gain an edge over competitors. The CTM process provides a comprehensive approach and guidelines to connect strategic governance and technical components with the organization's overarching business objectives. It entails various activities, including planning, organizing, and controlling the multiple parts of the CTM governance. It covers the entire value chain of cyber risk control activities under an overarching ERM umbrella.