Security business strategy and integration is a new domain which enables the collaboration with senior management (board, senior leadership team, business unit heads etc.) to achieve the above and more.

Understanding the business sector, a company’s history and management style while also comprehending preventive security, the structure of cybercrime, the way incidents need to be managed and how to survive are key.

• Understand senior management and key stakeholder’s concerns and assess their understanding of the security problem
• Determine the sector specific operational aspects and risks, the criticality of the information and the processes, the transformational speed and the exposure to regulatory and public concerns
• Complement the above with a first quick security and resilience analysis taking into account existing defences/controls
• Re-iterate with senior management their concerns and establish a more precise risk equation and draw the first solution considerations
• Set up with all relevant operational stakeholders and cubic consulting experts the outline of a gap assessment and a proposal of a cybersecurity and resilience improvement program

• Take into account the possibilities and limitations of change management
• Align activities to the size and financials of the company