Getting Started

Let's get started changing how we think about ECRM to include as much focus on cyber opportunity management as it does on cyber risk management. I will not repeat everything I've written up to this point about the importance of this pivot to "managing the upside" and "managing the downside." Chapter 7 reiterated the importance of integrating ECRM into business strategy, financial planning, and capital allocation by developing and documenting your ECRM Program and Cybersecurity Strategy. I've been asked often: What form might this documentation take?