As organizations accelerate digital transformation with mobile devices, cloud services, social media, and Internet of Things services, cybersecurity has become a key priority in enterprise risk management. While improving cybersecurity leads to higher levels of customer trust and increased revenue opportunities, rapidly evolving data protection and privacy regulations have complicated cybersecurity management. Against the backdrop of rapidly rising cyberbreaches and the emergence of novel cybersecurity technologies such as machine learning and artificial intelligence, this article introduces a cyber risk management framework, discusses a cyber risk assessment process, and illustrates a continuous improvement of cybersecurity performance and cyberinvestment cost analysis with a real-world cybersecurity example.

随着组织通过移动设备、云服务、社交媒体和物联网服务加速数字化转型，网络安全已成为企业风险管理的重中之重。虽然改善网络安全可以提高客户信任度和增加收入机会，但快速发展的数据保护和隐私法规使网络安全管理变得复杂。在网络入侵事件迅速增加以及机器学习、人工智能等新型网络安全技术出现的背景下，本文介绍了网络风险管理框架，讨论了网络风险评估流程，并阐述了网络安全绩效和网络投资成本分析的持续改进以真实世界的网络安全为例。