Fire Doesn’t Innovate is really two books: an executive primer on cyber risk and a methodology for assessing the maturity of security controls or countermeasures. It is worth buying the book for the primer alone, which is very easy to understand. Its primary lesson is that cyber risk management is a continuously evolving journey in which we must adapt to innovative adversaries. It gives non-technical executives enough knowledge to understand today’s most effective controls and to probe their staff with the right questions. It explains the all-important legal concept of “reasonable security”, the benefits of purchasing a cyber insurance policy that comes with breach coaching, and the use of attorney-client privilege to protect against claims of negligence. The author has a wonderful way of explaining cyber risk in non-technical terms using anecdotes from real-world breaches and analogies from the physical (e.g. fire) and biological (e.g. germs) worlds. Any time he uses a buzzword he explains it in simple terms. Sentences are short. It’s a joy to read and I found myself whipping through it at a rapid clip.
The second part describes CRO/Cyber Risk Opportunities’ top-down facilitated self-assessment. It’s a good way to build awareness of good cyber hygiene and accountability for cyber risk management among middle management. It comes with a free Google Sheet to evaluate your controls and helpful YouTube videos to guide you. The approach to calculating a 3-year Total Cost of Ownership for each control is simple and effective. One thing to be aware of: the assessment measures your mid-level managers’ PERCEPTIONS of their departments’ cyber maturity rather than ACTUAL cyber maturity. The mantra is “build a culture of cyber risk management from the top” and the details will follow. There is a lot of truth to this. But if your goal is to conduct a comprehensive gap analysis of your actual control maturity, you may need to complement the CRO approach with a bottom-up assessment that gets into the nitty gritty of individual policies, procedures and technologies.
All in all, I thoroughly recommend this book. It encapsulates decades of wisdom and yet is up-to-the minute with its guidance. And it is remarkably easy to read. Top-notch!
Loading your book clubs
There was a problem loading your book clubs. Please try again.
Not in a club? Learn more
Join or create book clubs
Choose books together
Track your books
Bring your club to Amazon Book Clubs, start a new book club and invite your friends to join, or find a club that’s right for you for free.
Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required. Learn more
Read instantly on your browser with Kindle for Web.
Using your mobile phone camera - scan the code below and download the Kindle app.
Flip to back Flip to front
Follow the Author
Something went wrong. Please try your request again later.
| Price | New from | Used from |
|
Audible Audiobook, Unabridged
"Please retry" |
$0.00
| Free with your Audible trial | |
- Read with Our Free App
-
Audiobook
$0.00 - 8 Used from $11.32 10 New from $12.99
Book recommendations, author interviews, editors' picks, and more. Read it now
Frequently bought together
- +
Total price:
To see our price, add these items to your cart.
Choose items to buy together.
Customers who bought this item also bought
Page 1 of 1 Start overPage 1 of 1
About the author
Follow authors to get new release updates, plus improved recommendations.
Executives and Entrepreneurs can finally understand cyber security and mitigate the risks associated
Reviewed in the United States on January 20, 2019
Entrepreneurs and business executives acknowledge risks of many types and work to manage or mitigate those risks. Unfortunately, cyber risk is often forgotten or even ignored due in part to the fact that many do not understand the field. It is overwhelming for most.Mr. Boyle wrote this book FOR the business executive and most importantly provided practical advice for the I.T. layman as well as the cyber risk professional.Prior to reading this book, I was not fully aware of my department and company's vulnerabilities, however, my team and I are currently implementing the processes to protect our organizations. Thank you Mr. Boyle!
Reviewed in the United States on January 20, 2019
Images in this review
Top reviews from the United States
There was a problem filtering reviews right now. Please try again later.
Reviewed in the United States 🇺🇸 on January 29, 2019
Reviewed in the United States 🇺🇸 on January 16, 2019
Reviewed in the United States 🇺🇸 on February 21, 2019
Reviewed in the United States 🇺🇸 on January 22, 2019
Reviewed in the United States 🇺🇸 on March 7, 2019
Executives and Entrepreneurs can finally understand cyber security and mitigate the risks associated
Reviewed in the United States 🇺🇸 on January 20, 2019
Executives and Entrepreneurs can finally understand cyber security and mitigate the risks associated
Reviewed in the United States 🇺🇸 on January 20, 2019
Entrepreneurs and business executives acknowledge risks of many types and work to manage or mitigate those risks. Unfortunately, cyber risk is often forgotten or even ignored due in part to the fact that many do not understand the field. It is overwhelming for most.Reviewed in the United States 🇺🇸 on January 20, 2019
Mr. Boyle wrote this book FOR the business executive and most importantly provided practical advice for the I.T. layman as well as the cyber risk professional.
Prior to reading this book, I was not fully aware of my department and company's vulnerabilities, however, my team and I are currently implementing the processes to protect our organizations. Thank you Mr. Boyle!
Images in this review
Reviewed in the United States 🇺🇸 on December 29, 2019
