An examination of how organizations manage cybersecurity as a business and regulatory concern. Students apply recognized risk frameworks, conduct risk assessments, map controls to compliance requirements, develop policy, and communicate security posture and risk to executive leadership.