
This resource offers an action plan informed by the way cyberattacks actually happen. It breaks the tasks down by role, starting with the Chief Executive Officer (CEO). It then details tasks for a Security Program Manager and the Information Technology (IT) team. While following this advice is not a guarantee you will never have a security incident, it does lay the groundwork for building an effective security program.