Spending on cybersecurity products and services is expected to top 123 billion U.S. dollars for 2020, more than double the 55 billion U.S. dollars spent in 2011.1 In that same period, cyber breaches quadrupled. Organizations globally face increasing liabilities, while boards of directors grapple with a seemingly Sisyphean challenge. Cyber Crossroads was born out of these alarming trends and a realization that the world cannot go on funneling finite resources into an indefinite, intractable problem. Cyber Crossroads brings together expertise from across the world, spanning aspects of the cyber problem (including technology, legal, risk, and economic) with the goal of creating a Cyber Standard of Care built through a global, not-for-profit research collaborative with no commercial interests. A Cyber Standard of Care should be applicable across industries and regardless of the organization size. It should be practical and implementable, with no requirement to purchase any product/service. Cyber Standard of Care should be woven into the existing governance fabric of the organization and it should not be yet another technical checklist, but a process/governance framework that can stand over time. To achieve this, we engaged with cyber risk experts and practitioners with a variety of relevant expertise, secured the advice/guidance of regulators and legal experts across jurisdictions, and interviewed leaders from 56 organizations globally to understand their challenges and identify best practices.

中文翻译：

---

网络十字路口：网络风险治理的全球研究合作组织

2020 年网络安全产品和服务的支出预计将达到 1230 亿美元，是 2011 年支出的 550 亿美元的两倍多。1在同一时期，网络漏洞数量翻了两番。全球组织面临越来越多的负债，而董事会则在努力应对看似严峻的挑战。Cyber​​ Crossroads 诞生于这些令人震惊的趋势，并认识到世界不能继续将有限的资源集中到一个不确定的、棘手的问题上。Cyber​​ Crossroads 汇集了来自世界各地的专业知识，涵盖网络问题的各个方面（包括技术、法律、风险和经济），其目标是通过与没有商业利益。无论组织规模如何，网络关注标准都应适用于各行各业。它应该是实用的和可实施的，不需要购买任何产品/服务。网络关怀标准应该融入组织的现有治理结构中，它不应该是另一个技术清单，而应该是一个可以长期保持的流程/治理框架。为实现这一目标，我们与具有各种相关专业知识的网络风险专家和从业人员合作，获得了跨司法管辖区的监管机构和法律专家的建议/指导，并采访了全球 56 家组织的领导人，以了解他们面临的挑战并确定最佳实践。网络关怀标准应该融入组织的现有治理结构中，它不应该是另一个技术清单，而应该是一个可以长期保持的流程/治理框架。为实现这一目标，我们与具有各种相关专业知识的网络风险专家和从业人员合作，获得了跨司法管辖区的监管机构和法律专家的建议/指导，并采访了全球 56 家组织的领导人，以了解他们面临的挑战并确定最佳实践。网络关怀标准应该融入组织的现有治理结构中，它不应该是另一个技术清单，而应该是一个可以长期保持的流程/治理框架。为实现这一目标，我们与具有各种相关专业知识的网络风险专家和从业人员合作，获得了跨司法管辖区的监管机构和法律专家的建议/指导，并采访了全球 56 家组织的领导人，以了解他们面临的挑战并确定最佳实践。