New 'handbook' offers steps for boards to manage cyber risks

The Internet Security Alliance and the National Association of Corporate Directors have released a “handbook” for boards of directors to manage cybersecurity risks.

The “Cyber-Risk Oversight” handbook released Thursday offers five steps for corporate and non-profit organizations to understand and approach cybersecurity as an enterprise-wide risk management issue, rather than as an IT issue, the groups say.

“Directors need to understand and approach cybersecurity as an enterprise-wide risk management issues, not just an IT issue; Directors should understand the...