Source: https://www.cisa.gov/sites/default/files/publications/Cyber Risk Management Primer for CEOs_0.pdf