Beyond Cybersecurity Protecting Your Digital Business

Beyond Cybersecurity: Protecting Your Digital Business arms your company against devastating online security breaches by providing you with the information and guidance you need to avoid catastrophic data compromise. Based upon highly-regarded risk assessment analysis, this critical text is founded upon proprietary research, client experience, and interviews with over 200 executives, regulators, and security experts, offering you a well-rounded, thoroughly researched resource that presents its findings in an organized, approachable style.

Members of the global economy have spent years and tens of billions of dollars fighting cyber threats—but attacks remain an immense concern in the world of online business. The threat of data compromise that can lead to the leak of important financial and personal details can make consumers suspicious of the digital economy, and cause a nosedive in their trust and confidence in online business models.

• Understand the critical issue of cyber-attacks, and how they are both a social and a business issue that could slow the pace of innovation while wreaking financial havoc
• Consider how step-change capability improvements can create more resilient organizations
• Discuss how increased collaboration within the cybersecurity industry could improve alignment on a broad range of policy issues
• Explore how the active engagement of top-level business and public leaders can achieve progress toward cyber-resiliency

Beyond Cybersecurity: Protecting Your Digital Business is an essential resource for business leaders who want to protect their organizations against cyber-attacks.

JAMES M. KAPLAN is a partner with McKinsey & Company in New York. He co-leads McKinsey's global IT infrastructure and cybersecurity practices.

TUCKER BAILEY is a partner in the Washington, DC location of McKinsey's Business Technology Office.

DEREK O'HALLORAN is Head of Information Technology and Electronics Industries at the World Economic Forum.

ALAN MARCUS is Head of Information and Communication Technology Industries at the World Economic Forum.

CHRIS REZEK is a senior expert consultant with McKinsey & Company in Boston.

Foreword vii

Preface xi

Executive Summary xxi

1 Cyber-attacks Jeopardize Companies’ Pace of Innovation 1

2 It Could Get Better—or $3 Trillion Worse 31

3 Prioritize Risks and Target Protections 53

4 Do Business in a Digitally Resilient Way 77

5 Modernize IT to Secure IT 101

6 Engage Attackers with Active Defense 123

7 After the Breach: Improve Incident Response across Business Functions 141

8 Build a Program that Drives toward Digital Resilience 157

9 Creating a Resilient Digital Ecosystem 185

Conclusion 209

Acknowledgments 213

About the Authors 215

Index 217

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.