Cyber Resilient Enterprise

Paul Dorey, an experienced cybersecurity executive, was previously the Chief Information Security Officer of Barclays and BP and held leadership roles at GSK and the National Grid. He currently works as a consultant, policy advisor and expert witness. He is a Visting Professor at Royal Holloway, University of London and is based between Guernsey and London, UK.Ananda Kumar Vaideesawaran is Executive Director of Cyber Managed Services at EY US. With over 20 years of cybersecurity experience, he previously held leadership positions at IBM and Wipro. He is based in Atlanta, GA.

• Chapter - 00: Leading the cyber resilient organization – why we wrote this book;Chapter - 01: The worst and longest day – why cyber security risk is a shared responsibility;Chapter - 02: Aligning cyber security with corporate strategy – how the board and CEO drive strategic governance;Chapter - 03: Quantifying and evaluating security as a strategic investment – working with the CFO;Chapter - 04: Embedding skills and cultivating a culture of security across the organization – how to collaborate with HR;Chapter - 05: Adding cyber security into procurement and supplier relationships – supply chain security;Chapter - 06: How contracts, regulations and third-party agreements enable security - partnering with legal and compliance teams;Chapter - 07: Driving enterprise-wide operational resilience – partnering with the COO;Chapter - 08: The trustworthy enterprise – how cybersecurity accelerates revenue and builds customer loyalty;Chapter - 09: IT vs security – fostering collaboration between IT and the cybersecurity team;Chapter - 10: Security convergence – protecting people and physical assets from combined cyber and physical threats;Chapter - 11: Outsourcing cybersecurity – managing risk and governing outcomes in subcontractors and the cloud;Chapter - 12: OT security and engineering – managing cyber risks in industrial control systems;Chapter - 13: Navigating cybersecurity risk in the world of AI;Chapter - 14: Conclusion – execution, accountability and the cyber resilient future