Cyber Risk Management

It is estimated that cyber crime costs trillions of dollars globally every year as businesses become increasingly reliant on technology. 87 per cent of FTSE 100 companies have identified cyber as a principal risk (Deloitte 2017), and it is clear that failure to focus on cyber risk can potentially lead to huge financial losses and disruption of operations, as well as reputational damage. Cyber Risk Management offers vital guidance on evaluating threats and effectively implementing and communicating a cyber security strategy. Crucially, human factors in cyber security are also considered, from employee vetting and managing insider threats, to theories of behaviour and staff training to guard against manipulation.

Structured in two parts, the first section looks at technical developments in how businesses use technology, including cloud computing, blockchain, cryptography, artificial intelligence and the Internet of Things. Case studies of real world cyber crimes, such as the attacks on Tesco Bank and Yahoo, help to explore the origin of threats. The second section provides guidance on how to successfully manage an organization's cyber security, covering risk assessments, financial impact analyses, crisis communications plans, international standards and legal responsibilities. Cyber Risk Management is the indispensable guide for those responsible for assessing cyber risks and creating information security strategies.