Optimal Spending on Cybersecurity Measures: Legal Reasoning

This book will highlight laws in place to protect personal information and integrates business-driven risk assessments to minimise geopolitical risks such as cyber threats. This book highlights laws in place to protect personal information and integrates business-driven risk assessments to minimise geopolitical risks such as cyber threats. It shares a strategic framework that could be used by various stakeholders involved in the implementation of cybersecurity measures to safeguard sensitive data and leverages a data-centric focus on the evolution of cyber-attacks. Further, it explains the concept of countering identity takeover through the use of a concrete example. Finally, the book provides six case studies using the cybersecurity risk management framework to show the elements necessary to create a defensible way of aligning cybersecurity to business risk. Features: “Cybersecurity as a Business Risk: How organisations must reframe cybersecurity spending not as a technical cost centre, but as a strategic business risk management investment with measurable accountability. Smarter Cyber Risk Investment: Introducing the cyber risk investment model and cybersecurity risk management framework that help leaders evaluate security initiatives with greater clarity, especially under budget and regulatory constraints. Privacy, Compliance & Data Protection: How organisations can align security spending with privacy laws, data protection requirements, government regulations, and industry standards while demonstrating meaningful compliance. Emerging Risk Areas—AI, DevOps & Health Data: The evolving risks surrounding cloud systems, DevOps practices, health data platforms, AI, and third-party service providers, and how structured frameworks help navigate them. Bridging Compliance & Meaningful Security: Kissoon’s core thesis, why there is a critical gap between compliance obligations and genuine security investment, and how organisations can bridge it through business-driven risk assessments. Governance, Risk & Compliance in Practice: Real-world case studies and applied frameworks that illustrate how cybersecurity funding decisions are made inside large organisational environments across multiple industries,” Authored by BrightKey PR. View AP News Coverage: .