op managers recognize cyber risk assessment and mitigation as an essential topic on their agendas. Many executiv es, however, are far removed from the day-to-day challenges of monitoring, detecting, and responding to evolving cyber risks, making it difficult to guide their organization towards cyber maturity.