Cyber Risk Is Business Risk: You Can Delegate the Decision, but Not the Liability
Amazon, Thursday, July 16th, 2026
A book by Chris Thatcher and Sam Rehman arguing that cyber risk is business risk and executive liability cannot be delegated.
This Book addresses the intersection of cybersecurity and business accountability, arguing that companies can outsource security decisions but not executive and board-level liability.
The authors position cyber threats as strategic business risks requiring direct oversight from decision-makers rather than technical concerns delegated to IT.
The work targets business leaders and executives seeking to understand personal and organizational exposure to cyber incidents.
By highlighting the accountability gap between operational decisions and ultimate responsibility, it makes a case for executive engagement in security governance.