1. CYBERSECURITY IS A Business Issue

2. Agenda Business Goals People, Processes, & Technology
Cybersecurity Program

3. Source: BREACHLEVELINDEX.COM

4. Copyright © 2019 Risk Based Security, Inc. All rights reserved.

5. Business Goals
Does your organization have defined business goals? Does your organization have defined goals for managing cyber risks? Does you organization have a strategic plan for achieving the defined cyber goals?

7. Cybersecurity Program
Tell me about your organization’s Cybersecurity Program. Technology alone will not adequately protect your organization

8. It’s Not Rocket Science, but…
A robust strategy includes addressing the basics 100% of the time. Covering the basics is not impossible, but does require a focused effort. The strategy will consist of an integration of people, processes, and technology.

9. Vulnerability Management

10. Stages of vulnerability management:
Discover
Prioritize
Scan/Assess
Report
Remediate
Verify

12. Cybersecurity Program
A cybersecurity program provides a holistic view of the actions needed to achieve sound cybersecurity management across the enterprise.

13. Cybersecurity Program Framework
A framework establishes a life cycle approach for developing and maintaining a comprehensive cybersecurity program. Cybersecurity is not a one-time task or project with a defined completion date.

14. Cybersecurity Program Success Factors

15. Critical factors to ensure that your program is positioned for success:
Executive Management Support
Business Goals and Objectives Alignment
Strong Governance Structure
Sound Security Standards & Frameworks
Defined Roles and Responsibilities
Shared Ownership

16. Cybersecurity Program Management

17. “I think that in any group activity – whether it be business, sports, or family – there has to be leadership or it won’t be successful.” – John Wooden

18. “There are risks and costs to action
“There are risks and costs to action. But they are far less than the long range risks of comfortable inaction.” – John F. Kennedy