The Most Critical Cybersecurity Decision

Enterprise cyber risk management (ECRM) is a mouthful and would naturally have different meanings for different individuals. From a C-suite and board perspective, your board's most crucial decision is HOW your organization will conduct ECRM. The decisions you make about HOW you will build your ECRM Program and Cybersecurity Strategy must consider how the cyber world is changing. In this chapter, I will unpack the term ECRM and discuss other foundational concepts to set the stage for making that HOW decision.