Author: Beth Musumeci and Edd Hardy

Boards that treat cybersecurity as a compliance issue will stay stuck in reactive mode. But the starting point for strategic capability is simpler than most directors assume.