This textbook places cyber security management within an organizational and strategic framework, enabling students to develop their knowledge and skills for a future career. The reader will learn to:

- evaluate different types of cyber risk

- carry out a threat analysis and place cyber threats in order of severity

- formulate appropriate cyber security management policy

- establish an organization-specific intelligence framework and security culture

- devise and implement a cyber security awareness programme

- integrate cyber security within an organization’s operating system

Learning objectives, chapter summaries and further reading in each chapter provide structure and routes to further in-depth research. Firm theoretical grounding is coupled with short problem-based case studies reflecting a range of organizations and perspectives, illustrating how the theory translates to practice, with each case study followed by a set of questions to encourage understanding and analysis. Non-technical and comprehensive, this textbook shows final year undergraduate students and postgraduate students of Cyber Security Management, as well as reflective practitioners, how to adopt a pro-active approach to the management of cyber security. Online resources include PowerPoint slides, an instructor’s manual and a test bank of questions.