A work in development examining how organisations distinguish between reported cybersecurity performance and operational reality.
The manuscript challenges maturity-driven reporting and explores how assurance can be grounded in measurable evidence and independent validation.
Intended audience:
• CISOs and security leaders
• Risk and audit professionals
• Board-level decision makers
Status: Manuscript in development.
For publishing enquiries, please use the contact page.