Book excerpt: This textbook places cyber security management within an organizational and strategic framework, enabling students to develop their knowledge and skills for a future career. The reader will learn to: • evaluate different types of cyber risk • carry out a threat analysis and place cyber threats in order of severity • formulate appropriate cyber security management policy • establish an organization-specific intelligence framework and security culture • devise and implement a cyber security awareness programme • integrate cyber security within an organization’s operating system Learning objectives, chapter summaries and further reading in each chapter provide structure and routes to further in-depth research. Firm theoretical grounding is coupled with short problem-based case studies reflecting a range of organizations and perspectives, illustrating how the theory translates to practice, with each case study followed by a set of questions to encourage understanding and analysis. Non-technical and comprehensive, this textbook shows final year undergraduate students and postgraduate students of Cyber Security Management, as well as reflective practitioners, how to adopt a pro-active approach to the management of cyber security. Online resources include PowerPoint slides, an instructor’s manual and a test bank of questions.