Beyond Cybersecurity

Beyond Cybersecurity: Protecting Your Digital Business arms your company against devastating online security breaches by providing you with the information and guidance you need to avoid catastrophic data compromise. Based upon highly-regarded risk assessment analysis, this critical text is founded upon proprietary research, client experience, and interviews with over 200 executives, regulators, and security experts, offering you a well-rounded, thoroughly researched resource that presents its findings in an organized, approachable style.

Members of the global economy have spent years and tens of billions of dollars fighting cyber threatsbut attacks remain an immense concern in the world of online business. The threat of data compromise that can lead to the leak of important financial and personal details can make consumers suspicious of the digital economy, and cause a nosedive in their trust and confidence in online business models.

• Understand the critical issue of cyber-attacks, and how they are both a social and a business issue that could slow the pace of innovation while wreaking financial havoc
• Consider how step-change capability improvements can create more resilient organizations
• Discuss how increased collaboration within the cybersecurity industry could improve alignment on a broad range of policy issues
• Explore how the active engagement of top-level business and public leaders can achieve progress toward cyber-resiliency

Beyond Cybersecurity: Protecting Your Digital Business is an essential resource for business leaders who want to protect their organizations against cyber-attacks.

JAMES M. KAPLAN is a partner with McKinsey& Company in New York. He coleads McKinseys global IT infrastructure and cybersecurity practices.

TUCKER BAILEY is a partner in the Washington, DC location of McKinseys Business Technology Office.

DEREK OHALLORAN is Head of Information Technology and Electronics Industries at the World Economic Forum.

ALAN MARCUSis Head of Information and Communication Technology Industries at the World Economic Forum.

CHRIS REZEKis a senior expert consultant with McKinsey& Company in Boston.

Foreword vii

Preface xi

Executive Summary xxi

1 Cyber-attacks Jeopardize Companies Pace of Innovation 1

2 It Could Get Betteror $3 Trillion Worse 31

3 Prioritize Risks and Target Protections 53

4 Do Business in a Digitally Resilient Way 77

5 Modernize IT to Secure IT 101

6 Engage Attackers with Active Defense 123

7 After the Breach: Improve Incident Response across Business Functions 141

8 Build a Program that Drives toward Digital

Resilience 157

9 Creating a Resilient Digital Ecosystem 185

Conclusion 209

Acknowledgments 213

About the Authors 215

Index 217