Who this book is for
This book is for information technology and cybersecurity professionals who are exploring the world of governance, risk, and compliance. Perhaps you’ve donned the management hat for the first time, leaving some of your technical abilities behind in favor of writing policy. This book is meant for you – the person who needs an understanding of NIST, risk, and how to manage it via policies and technical controls.