Cyber Security for Managers, Step by Step for 2027

Lead cyber security without being a technical specialist: know the threats you actually face, put the essential controls and policies in place, protect personal data and respond calmly to incidents.

Who it's for

For managers, directors, practice managers and founders who are responsible for cyber security but are not technical specialists. You do not need to configure a firewall or read code: your job is to know what matters most, ask the right questions, fund the right fixes and lead calmly when something goes wrong.

What you'll learn

• List the data, systems and processes you cannot do without, and match each to the threats most likely to hit it, from phishing and ransomware to business email compromise.
• Govern cyber security using the NIST Cybersecurity Framework and the NCSC’s board guidance: set clear roles, assess your maturity honestly and agree three priorities.
• Check that the five Cyber Essentials controls, multi-factor authentication and tested backups are genuinely in place, with the questions to put to your IT lead.
• Build a culture where people report mistakes quickly, with short training, ethical phishing simulations and tidy processes when people join, move and leave.
• Write short policies on acceptable use, passwords, personal devices, remote working and AI tools that people will actually follow.
• Map the personal data you hold, keep less of it for less time and know how to handle a personal data breach under UK GDPR.
• Manage supplier, cloud and remote-access risk, and prepare an incident plan and response card you can rehearse with a tabletop exercise.

What's inside

• 56 pages, 8 chapters
• Every chapter follows the same pattern: key concepts, a step-by-step method, an illustrative example from a fictional UK organisation, a ready-to-use tool, common mistakes, key steps and a “Try it” exercise
• Tools include a crown jewels inventory, cyber maturity self-assessment, essential controls checklist, security awareness plan, one-page policy template, record of processing activities, supplier security questionnaire and incident response card
• A 30-60-90 day action plan with checklists and a quarterly security review, plus a glossary
• PDF in A4 format — read on screen or print
• Instant download after purchase

Contents

1. Knowing the Threats You Actually Face
2. Governing Cyber Security as a Leader
3. Putting the Essential Controls in Place
4. Making People Your Strongest Defence
5. Writing Security Policies People Follow
6. Protecting Personal Data
7. Managing Supplier, Cloud and Remote-Work Risk
8. Responding to an Incident

Part of The Business Library

This title is one of the 55 ebooks in The Business Library, available together for £109 (worth £1,437 if bought separately: the total of the individual prices of the included titles in our store). It is also included in The Ultimate Business Bundle, which adds 8 checklists and toolkits and 10 workbooks — all 73 products for £147.