Introduction How can directors judge whether ECRM contributes to business value? Bring the emerging evidence into board discussions with questions that clarify expected benefits, test assumptions, and distinguish demonstrated results from promising possibilities. A note on terms Enterprise cyber risk management (ECRM) is how an organization manages cyber risks and opportunities that affect its business … Continue reading How boards can assess the business value of ECRM