Over 60 ‘effective practices’ for cyber programs

Each of the high-level practice areas is scalable and adaptable based on a firm's risk profile, business model and technology complexity