CCAK

IMO, this is a key resource for raising/acknowledging cybersecurity as a business risk issue at the highest levels of any organization; i.e., beyond it being relegated as an "IT" issue, wholly addressable through some magic bullet technology for which there is little budget. An integrated risk perspective is critical through all levels of an organization, down to the weakest link the human, and particularly now when more of the workforce is remote.