Cyber Risk is a Myth – Security Risks ARE Business Risks
There is no meaningful difference between a manufacturing plant going offline from ransomware or a hurricane. The business impact is the same. My new book from CRC Press removes the artificial separation between cybersecurity and enterprise risk.
Stop Speaking Two Languages About the Same Risk
In boardrooms everywhere, security teams talk about vulnerabilities and patches while executives think in revenue, reputation, and operational continuity. This communication gap isn’t just inconvenient. It’s financially devastating. Drawing on court cases, stock market data, and hard evidence, this book establishes a practical premise: when properly understood and communicated, security risks require the same frameworks, language, and decision processes as any other business risk.
Kayne McGladrey is a CISSP and Senior IEEE Member with three decades of experience in cybersecurity, including service as a defense-industrial-base CISO. He is the author of “Cyber Risk is a Myth” (CRC Press, 2026), which argues that security risks are business risks and should be governed with the same frameworks and decision processes as any other enterprise risk, and the developer of the GRC Maturity Model, an industry-standard framework for assessing governance, risk, and compliance programs.
His writing and commentary have appeared in 250+ media outlets since 2017, including ABC News and the Financial Times, and he has spoken at events
including RSA Conference, Gartner IT Security & Risk, ISACA GRC, and ISC2 Congress. His industry experience spans financial services, manufacturing, technology, healthcare, insurance, fintech, aerospace, defense, logistics, and construction.
