{
  "docId": "019dd923-5de0-76bd-a169-54303fbbe19b",
  "docSlug": "0ec770bd87313ce8",
  "documentTitle": "The CEO’s Guide to Cybersecurity",
  "authorId": "BCG",
  "authorName": null,
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "portrait",
  "aspectRatio": 0.784,
  "pageNumber": 9,
  "pageCount": 15,
  "prevPage": 8,
  "nextPage": 10,
  "slideType": "other",
  "function": "diagnose",
  "density": "balanced",
  "nDataPoints": 0,
  "notes": "Part of a series of diagnostic questions for cybersecurity assessment.",
  "elementsJson": [
    "headline_text",
    "paragraph",
    "bullet_list"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5de0-76bd-a169-54303fbbe19b/9",
  "deckHref": "/decks/019dd923-5de0-76bd-a169-54303fbbe19b",
  "deckJsonHref": "/decks/019dd923-5de0-76bd-a169-54303fbbe19b.json",
  "deckAnchorHref": "/decks/019dd923-5de0-76bd-a169-54303fbbe19b#slide-9",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "In order to properly evaluate an organization's cybersecurity program, it's incredibly important for business leadership to understand the current systems in place.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-0a6c-76ba-8e74-571714361ca4",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.55,
        "x": 0.36,
        "y": 0.35
      },
      "kind": "list",
      "text": "How do you know our measures are effective, i.e., can you demonstrate how you are following best practices?\nHas anyone (outside of the organization) reviewed and verified that we have sufficient preventative measures in place?",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "2059af09-b836-482f-9f0d-ce5d3f7d915a",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.07,
        "w": 0.72,
        "x": 0.14,
        "y": 0.21
      },
      "kind": "paragraph",
      "text": "In order to properly evaluate an organization's cybersecurity program, it's incredibly important for business leadership to understand the current systems in place. In particular, the tools deployed to prevent or reduce threats potentially impacting the organization. These systems should be verified, documented, and tested frequently with detailed reporting output.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "3c42a189-536f-49c5-a88f-08388774ad13",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.82,
        "x": 0.09,
        "y": 0.14
      },
      "kind": "title",
      "text": "6 What preventative measures have you implemented already to protect our company?",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "4db6c522-f21e-4920-980a-09ae6469731b",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.02,
        "w": 0.23,
        "x": 0.36,
        "y": 0.32
      },
      "kind": "title",
      "text": "FOLLOW-UP QUESTIONS",
      "attrs": null,
      "subkind": "subtitle",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "68109fd9-70d9-498f-8570-aed906d2d060",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "Action Titles",
      "slug": "action-titles",
      "agent": "Architect",
      "layer": "slide",
      "matchId": "019dd95a-14f6-720d-8375-63aa75ef9b39",
      "evidence": "Title is the prevention question itself",
      "confidence": 80
    },
    {
      "name": "Audience Definition",
      "slug": "audience-definition",
      "agent": "Storyteller",
      "layer": "slide",
      "matchId": "9007a3ee-2bc5-4a40-85ea-993d33af9c04",
      "evidence": "In order to properly evaluate an organization's cybersecurity program, it's incredibly important for business leadership to understand the current systems in place.",
      "confidence": 0.6
    },
    {
      "name": "One Idea Rule",
      "slug": "one-idea-rule",
      "agent": "Designer",
      "layer": "slide",
      "matchId": "019dd95a-14f6-720d-8375-67f6d2b06654",
      "evidence": "Whole slide on the single preventative-measures question",
      "confidence": 75
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 9,
      "from": 4,
      "beatId": "019dd95a-0702-74a3-87e1-68abc4f9b35a",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Problem & Complication",
      "beatSlug": "consultants-gambit-problem-complication",
      "evidence": "Questions 1-6 enumerate exposure: assets, education, strategy, attack vectors, recovery, prevention",
      "position": 2,
      "confidence": 55,
      "parentBeatName": "Complication",
      "parentBeatSlug": "complication"
    }
  ],
  "loops": [
    {
      "to": 9,
      "from": 3,
      "name": "Mece Breakdown",
      "slug": "40-mece-breakdown",
      "bestFor": "Problem structuring, ensuring completeness, strategic analysis",
      "matchId": "019dd95a-088c-724c-b30d-fd91b0cb420d",
      "evidence": "Intro frames the question set, then six distinct, non-overlapping diagnostic questions (assets, training, strategy, attack vectors, recovery, prevention)",
      "position": 1,
      "objective": "Enumerate the foundational cybersecurity readiness questions a CEO must diagnose",
      "structure": "The Whole -> Category A (distinct) -> Category B (distinct) -> Category C (distinct) -> Complete Coverage",
      "confidence": 70,
      "description": "Divide a complex topic into mutually exclusive, collectively exhaustive categories"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}