{
  "docId": "019dd923-5de0-76bd-a169-54303fbbe19b",
  "docSlug": "0ec770bd87313ce8",
  "documentTitle": "The CEO’s Guide to Cybersecurity",
  "authorId": "BCG",
  "authorName": null,
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "portrait",
  "aspectRatio": 0.784,
  "pageNumber": 11,
  "pageCount": 15,
  "prevPage": 10,
  "nextPage": 12,
  "slideType": "problem_statement",
  "function": "frame_problem",
  "density": "overcrowded",
  "nDataPoints": 1,
  "notes": "The slide uses a numbered list format (8) suggesting it is part of a larger series of questions.",
  "elementsJson": [
    "paragraph",
    "numbered_list"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5de0-76bd-a169-54303fbbe19b/11",
  "deckHref": "/decks/019dd923-5de0-76bd-a169-54303fbbe19b",
  "deckJsonHref": "/decks/019dd923-5de0-76bd-a169-54303fbbe19b.json",
  "deckAnchorHref": "/decks/019dd923-5de0-76bd-a169-54303fbbe19b#slide-11",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "Experts advise that 10% to 15% of an organization's IT budget be allocated for protection against data breaches and cybersecurity attacks.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd951-fefa-773b-abc6-f352e2597e52",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.5,
        "x": 0.36,
        "y": 0.5
      },
      "kind": "list",
      "text": "What percentage of our IT budget is allocated for cybersecurity?\nHow do we determine that percentage each year?\nDo we calculate potential business loss caused by an attack?",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "5bd0b760-bbe6-4dd4-98a3-f0ecc7843d81",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "IT budget allocation: 10% to 15%",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd951-fefa-773b-abc6-f8607706cd1e",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.1,
        "w": 0.72,
        "x": 0.14,
        "y": 0.46
      },
      "kind": "paragraph",
      "text": "Experts advise that 10% to 15% of an organization's IT budget be allocated for protection against data breaches and cybersecurity attacks. The higher your current risk, the larger the investment needed. Estimate your value of your company's net worth, including risk of down time, should a cyberattack happen, to determine the value of business loss.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "7b8398fe-5e51-4c20-be99-bf936810a3af",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.12,
        "w": 0.72,
        "x": 0.14,
        "y": 0.22
      },
      "kind": "paragraph",
      "text": "As cyber threats continue to increase, aligning appropriate budget with technology risk management should be a top priority. Cybersecurity spend is like having insurance. It may be hard to measure, but it is required to reduce risk of revenue loss, customer information, intellectual property, company downtime, and reputation.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "83952026-9273-4b91-b4d7-8378825b1411",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.1,
        "w": 0.72,
        "x": 0.14,
        "y": 0.35
      },
      "kind": "paragraph",
      "text": "No matter how many technology companies you have incorporated or how good you believe your cyber hygiene, there's always room for improvement. Most CISOs and companies don't have an infinite budget, but cybersecurity spend is an essential cost of doing business: \"an ounce of prevention is better than a pound of cure.\"",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "c40b5fb4-9286-43d0-9e66-0af904054b9c",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "quote",
      "text": "an ounce of prevention is better than a pound of cure.",
      "attrs": null,
      "subkind": null,
      "toolName": "Authority citation",
      "toolSlug": "authority-citation",
      "confidence": null,
      "componentId": "019dd951-fefa-773b-abc6-f48f34340750",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.8,
        "x": 0.08,
        "y": 0.14
      },
      "kind": "title",
      "text": "8 How do you determine the appropriate budget for technology risk management?",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "fa21d83b-85ef-4795-a0e9-ce10dc363ecd",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.02,
        "w": 0.2,
        "x": 0.36,
        "y": 0.47
      },
      "kind": "title",
      "text": "FOLLOW-UP QUESTIONS",
      "attrs": null,
      "subkind": "subtitle",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "147239d5-0ecc-4a14-9654-5ffbd97a9da7",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "Action Titles",
      "slug": "action-titles",
      "agent": "Architect",
      "layer": "slide",
      "matchId": "019dd95a-14f6-720d-8375-759b1f9360e7",
      "evidence": "Title is the budget question",
      "confidence": 80
    },
    {
      "name": "Authority Bias",
      "slug": "authority-bias",
      "agent": "Storyteller",
      "layer": "slide",
      "matchId": "019dd95a-14f6-720d-8375-7f638a3e821a",
      "evidence": "'Experts advise...' frames the 10-15% figure as expert guidance",
      "confidence": 80
    },
    {
      "name": "Concrete Language",
      "slug": "concrete-language",
      "agent": "Storyteller",
      "layer": "slide",
      "matchId": "019dd95a-14f6-720d-8375-7adac571b0a3",
      "evidence": "Quantified prescription: '10% to 15% of an organization's IT budget'",
      "confidence": 85
    },
    {
      "name": "Problem Statement Canvas",
      "slug": "problem-statement-canvas",
      "agent": "Architect",
      "layer": "slide",
      "matchId": "48376359-c645-47b4-bf85-437c57cc33f3",
      "evidence": "Experts advise that 10% to 15% of an organization's IT budget be allocated for protection against data breaches and cybersecurity attacks.",
      "confidence": 0.7
    },
    {
      "name": "Quantification",
      "slug": "quantification",
      "agent": null,
      "layer": "slide",
      "matchId": "af600721-2b81-4b8b-abc9-bb3155c45129",
      "evidence": "IT budget allocation: 10% to 15%",
      "confidence": 0.6
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 11,
      "from": 10,
      "beatId": "019dd95a-0702-74a3-87e1-6dec5482820e",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Solution & Approach",
      "beatSlug": "consultants-gambit-solution-approach",
      "evidence": "Q7-8 prescribe measurement program and budget allocation method",
      "position": 3,
      "confidence": 55,
      "parentBeatName": "Turn",
      "parentBeatSlug": "turn"
    }
  ],
  "loops": [
    {
      "to": 14,
      "from": 10,
      "name": "Mece Breakdown",
      "slug": "40-mece-breakdown",
      "bestFor": "Problem structuring, ensuring completeness, strategic analysis",
      "matchId": "019dd95a-088c-724c-b30e-0316b53f0e64",
      "evidence": "Q7-Q11 cover distinct management levers: measurement, budget, threat outlook, talent, current risks",
      "position": 2,
      "objective": "Enumerate the operational/strategic management dimensions of a cybersecurity program",
      "structure": "The Whole -> Category A (distinct) -> Category B (distinct) -> Category C (distinct) -> Complete Coverage",
      "confidence": 65,
      "description": "Divide a complex topic into mutually exclusive, collectively exhaustive categories"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}