The Business of Cyber : Why You Should Question What Your Security Team Are Telling You Paperback / softback

This book examines the cybersecurity phenomenon, looking at the folklore, the hype, and the behaviour of its practitioners.

A central theme is that the management of cybersecurity needs to be owned by the people running the organisation, rather than by the cybersecurity team, who frequently don’t have management as a core skill.

In order to effect that change, managers need to have the background and detail to challenge what they are being told, enabling them to engage in a way that will result in more appropriate outcomes for the business.

This book provides that background and detail. It debunks a number of cyber-myths, and calls out basic errors in the accepted thinking on cyber.

The content is strongly rooted in available research and presented in an accessible manner, with a number of business-related case studies.

Each chapter in the book takes a theme such as end-user behaviours and compares the available evidence with what the industry would like to have its customers believe.

The conclusion is that there is definitely a problem, and we certainly need cyber defences.

Just not the ones the industry is currently selling.