Gregory Falco is an Assistant Professor at Johns Hopkins University's Department of Civil & Systems Engineering and the Institute for Assured Autonomy. He has been listed in Forbes 30 Under 30 for Enterprise Technology for his contributions to internet of things (IoT) security. Dr. Falco has invented and holds patents for embedded system security and explainable AI technology. He has researched and lectured at Stanford, the Massachusetts Institute of Technology, Harvard, and Columbia Universities. He has consulted for a wide variety of organizations such as the World Bank, NASA Jet Propulsion Laboratory, the US Department of Defense, the UN Foundation, the National Academy of Sciences, and in the insurance and energy sectors. Prior to academia, Dr. Falco co-founded and led Accenture's IoT Smart City division. An NSF-Fulbright Scholar in Critical Infrastructure Cybersecurity, he holds a BS from Cornell University, MS from Columbia University and PhD from the Massachusetts Institute of

Technology.

Eric Rosenbach is Co-Director and Lecturer at the Harvard Kennedy School's Belfer Center for Science and International Affairs. He has more than two decades of experience working on cybersecurity issues in senior executive positions in government, industry, and academia. In the Department of Defense, he served as the "Cyber Czar," Pentagon Chief of Staff, and Assistant Secretary of Defense. In the private sector, he was Chief Security Officer for a large European telecommunications firm and led cybersecurity efforts for a global management consulting firm that advised Fortune 500 executives on cyber risk mitigation. He is also a former Army Intelligence Officer who commanded a telecommunications intelligence unit. A Fulbright Scholar with a JD from Georgetown, MPP from Harvard, and BA from Davidson College, Mr. Rosenbach has written several books on national security.

• Preface


• Chapter 1: Why Is Cyber Risk an Issue?


• Chapter 2: Who Is Attacking Us?


• Chapter 3: How Do I Assess Our Cyber Risk?


• Chapter 4: What Do I Need to Know About Cyber Frameworks, Standards, and Laws?


• Chapter 5: Who Is Responsible for Cybersecurity?


• Chapter 6: What Risk Prevention Measures Can I Use?


• Chapter 7: What Risk Resilience Measures Can I Use?


• Chapter 8: How Do I Embed Cyber Risk Management in All Aspects of the Organization?


• Conclusion