Abstract

In recent years, the cybersecurity discipline has become fully embedded within quality and safety. Cybersecurity touches virtually every aspect of an organization operations and certainly cannot be overlooked or underestimated. In the new Cybersecurity and Risk Management (Quality Press, 2026), the authors address the disconnect between established risk management frameworks and the rapidly advancing field of cybersecurity. In this exclusive book excerpt, authors outline the interplay between assets, threats, vulnerabilities, exploitability, impact and severity. Ultimately, the authors aim to help organizations move from reactive cybersecurity practices to a mature, integrated and risk-based approach that protects customers, users, patients and governments, as well as their reputation and the general public.