An introduction to managing cybersecurity as a business and regulatory concern. Students apply recognized risk frameworks, conduct basic risk assessments, examine major compliance and privacy regulations, and learn to communicate risk to non-technical audiences.