Dr. Jason Edwards, DM, CISSP, CRISC, is an esteemed cybersecurity expert and accomplished industry leader with over 25 years in cybersecurity, risk, and compliance, backed by a specialized doctorate in Cybersecurity Regulatory Risk and Compliance. A prolific educator and influencer, Dr. Edwards contributes as an Adjunct Cyber Professor at multiple universities and is recognized as a leading cybersecurity voice on LinkedIn. His portfolio includes many publications, including the notable Cyber Spear educational newsletter. In addition to his remarkable professional achievements, Dr. Edwards proudly served as a distinguished combat veteran and premier military cyber officer. Griffin Weaver, JD, serves as the Managing Legal Director at a renowned technology company and is also a respected Adjunct Professor specializing in Cybersecurity Law. With a rich background encompassing various technical and managerial roles in IT, Griffin seamlessly transitioned into a flourishing legal career after earning his law degree from the University of Utah. As an acknowledged thought leader, Griffin has enhanced the domain with his scholarly contributions through numerous articles. He is a sought-after speaker renowned for his insightful presentations at cybersecurity conferences.

• Purpose of the Book xviiTarget Audience xixStructure of the Book xxiForeword by Wil Bennett xxiiiForeword by Gary McAlum xxvChapter 1 Governance, Risk Management, and Compliance 1Chapter 2 The Landscape of Cybersecurity 19Chapter 3 Cybersecurity Leadership: Insights and Best Practices 33Chapter 4 Cybersecurity Program and Project Management 53Chapter 5 Cybersecurity for Business Executives 69Chapter 6 Cybersecurity and the Board of Directors 87Chapter 7 Risk Management 109Chapter 8 The NIST Risk Management Framework 131Chapter 9 Cybersecurity Metrics 151Chapter 10 Risk Assessments 171Chapter 11 NIST Cybersecurity Framework 191Chapter 12 Cybersecurity Frameworks 209Chapter 13 NIST SP 800-53: Security and Privacy Controls Framework 231Chapter 14 The FFIEC: An Introduction 245Chapter 15 U.S. Federal Cybersecurity Regulations 267Chapter 16 State-level Cybersecurity Regulations 287Chapter 17 International Cybersecurity Laws and Regulations 299Chapter 18 Privacy Laws and Their Intersection with Cybersecurity 315Chapter 19 Auditing Cybersecurity: Guides for Auditors and the Audited 333Chapter 20 The Challenging Role of the Regulator 355Chapter 21 Understanding US Regulatory Bodies 377Chapter 22 Managing Regulatory Visits and Requests for Information 395Chapter 23 Understanding Regulatory Penalties 409Chapter 24 Addressing and Remediating Regulatory Findings 429Chapter 25 Cybersecurity Architecture 445Chapter 26 Risk Mitigation 463Chapter 27 Cloud Security 481Chapter 28 Artificial Intelligence in Cybersecurity 497Chapter 29 Quantum Computing: A New Frontier 511Chapter 30 Incident Response and Recovery 521Chapter 31 Navigating the Cyber Insurance Maze 541Glossary 549Cybersecurity Resources 555Ready to Use KPI Examples 567Ready to Use KRI Examples 599The End 631Index 633

Dr. Jason Edwards, DM, CISSP, CRISC, is an esteemed cybersecurity expert and accomplished industry leader with over 25 years in cybersecurity, risk, and compliance, backed by a specialized doctorate in Cybersecurity Regulatory Risk and Compliance. A prolific educator and influencer, Dr. Edwards contributes as an Adjunct Cyber Professor at multiple universities and is recognized as a leading cybersecurity voice on LinkedIn. His portfolio includes many publications, including the notable Cyber Spear educational newsletter. In addition to his remarkable professional achievements, Dr. Edwards proudly served as a distinguished combat veteran and premier military cyber officer. Griffin Weaver, JD, serves as the Managing Legal Director at a renowned technology company and is also a respected Adjunct Professor specializing in Cybersecurity Law. With a rich background encompassing various technical and managerial roles in IT, Griffin seamlessly transitioned into a flourishing legal career after earning his law degree from the University of Utah. As an acknowledged thought leader, Griffin has enhanced the domain with his scholarly contributions through numerous articles. He is a sought-after speaker renowned for his insightful presentations at cybersecurity conferences.

• Purpose of the Book xviiTarget Audience xixStructure of the Book xxiForeword by Wil Bennett xxiiiForeword by Gary McAlum xxvChapter 1 Governance, Risk Management, and Compliance 1Chapter 2 The Landscape of Cybersecurity 19Chapter 3 Cybersecurity Leadership: Insights and Best Practices 33Chapter 4 Cybersecurity Program and Project Management 53Chapter 5 Cybersecurity for Business Executives 69Chapter 6 Cybersecurity and the Board of Directors 87Chapter 7 Risk Management 109Chapter 8 The NIST Risk Management Framework 131Chapter 9 Cybersecurity Metrics 151Chapter 10 Risk Assessments 171Chapter 11 NIST Cybersecurity Framework 191Chapter 12 Cybersecurity Frameworks 209Chapter 13 NIST SP 800-53: Security and Privacy Controls Framework 231Chapter 14 The FFIEC: An Introduction 245Chapter 15 U.S. Federal Cybersecurity Regulations 267Chapter 16 State-level Cybersecurity Regulations 287Chapter 17 International Cybersecurity Laws and Regulations 299Chapter 18 Privacy Laws and Their Intersection with Cybersecurity 315Chapter 19 Auditing Cybersecurity: Guides for Auditors and the Audited 333Chapter 20 The Challenging Role of the Regulator 355Chapter 21 Understanding US Regulatory Bodies 377Chapter 22 Managing Regulatory Visits and Requests for Information 395Chapter 23 Understanding Regulatory Penalties 409Chapter 24 Addressing and Remediating Regulatory Findings 429Chapter 25 Cybersecurity Architecture 445Chapter 26 Risk Mitigation 463Chapter 27 Cloud Security 481Chapter 28 Artificial Intelligence in Cybersecurity 497Chapter 29 Quantum Computing: A New Frontier 511Chapter 30 Incident Response and Recovery 521Chapter 31 Navigating the Cyber Insurance Maze 541Glossary 549Cybersecurity Resources 555Ready to Use KPI Examples 567Ready to Use KRI Examples 599The End 631Index 633

Dr. Jason Edwards, DM, CISSP, CRISC, is an esteemed cybersecurity expert and accomplished industry leader with over 25 years in cybersecurity, risk, and compliance, backed by a specialized doctorate in Cybersecurity Regulatory Risk and Compliance. A prolific educator and influencer, Dr. Edwards contributes as an Adjunct Cyber Professor at multiple universities and is recognized as a leading cybersecurity voice on LinkedIn. His portfolio includes many publications, including the notable Cyber Spear educational newsletter. In addition to his remarkable professional achievements, Dr. Edwards proudly served as a distinguished combat veteran and premier military cyber officer. Griffin Weaver, JD, serves as the Managing Legal Director at a renowned technology company and is also a respected Adjunct Professor specializing in Cybersecurity Law. With a rich background encompassing various technical and managerial roles in IT, Griffin seamlessly transitioned into a flourishing legal career after earning his law degree from the University of Utah. As an acknowledged thought leader, Griffin has enhanced the domain with his scholarly contributions through numerous articles. He is a sought-after speaker renowned for his insightful presentations at cybersecurity conferences.

• Purpose of the Book xviiTarget Audience xixStructure of the Book xxiForeword by Wil Bennett xxiiiForeword by Gary McAlum xxvChapter 1 Governance, Risk Management, and Compliance 1Chapter 2 The Landscape of Cybersecurity 19Chapter 3 Cybersecurity Leadership: Insights and Best Practices 33Chapter 4 Cybersecurity Program and Project Management 53Chapter 5 Cybersecurity for Business Executives 69Chapter 6 Cybersecurity and the Board of Directors 87Chapter 7 Risk Management 109Chapter 8 The NIST Risk Management Framework 131Chapter 9 Cybersecurity Metrics 151Chapter 10 Risk Assessments 171Chapter 11 NIST Cybersecurity Framework 191Chapter 12 Cybersecurity Frameworks 209Chapter 13 NIST SP 800-53: Security and Privacy Controls Framework 231Chapter 14 The FFIEC: An Introduction 245Chapter 15 U.S. Federal Cybersecurity Regulations 267Chapter 16 State-level Cybersecurity Regulations 287Chapter 17 International Cybersecurity Laws and Regulations 299Chapter 18 Privacy Laws and Their Intersection with Cybersecurity 315Chapter 19 Auditing Cybersecurity: Guides for Auditors and the Audited 333Chapter 20 The Challenging Role of the Regulator 355Chapter 21 Understanding US Regulatory Bodies 377Chapter 22 Managing Regulatory Visits and Requests for Information 395Chapter 23 Understanding Regulatory Penalties 409Chapter 24 Addressing and Remediating Regulatory Findings 429Chapter 25 Cybersecurity Architecture 445Chapter 26 Risk Mitigation 463Chapter 27 Cloud Security 481Chapter 28 Artificial Intelligence in Cybersecurity 497Chapter 29 Quantum Computing: A New Frontier 511Chapter 30 Incident Response and Recovery 521Chapter 31 Navigating the Cyber Insurance Maze 541Glossary 549Cybersecurity Resources 555Ready to Use KPI Examples 567Ready to Use KRI Examples 599The End 631Index 633