The most important business aspect of Cyber or Information security before the myriad of jargon or technology complexity and just pure geekiness that all business leaders should ask themselves is :
WHAT IS MY APPITITE FOR RISK FOR MYSELF AND MY ORGANISATION
Steven BANKS
Only at this point can a strategy and approach can be created and formulated. Without a clear understanding of this answer the question becomes hidden in the realms of an IT department which in most cases has its own agenda that is very separate from the overall business objectives.
