About the Author

Rob Arnold entered the professional world of IT when what is today known as cybersecurity, was just part of the job. Rob spent two decades working and providing IT consulting, for companies ranging from Fortune 500 and large private firms, to small mom-and-pop shops, and everything in between. During this time, Rob wrote security policies, led companies through security-related compliance audits, and had several opportunities to do what is now called ethical hacking. Rob has solved many other problems for clients, ranging from securing executive communication from the prying eyes of untrusted IT staffers, to disaster recovery planning, to developing authentication and permission management software.

Rob returned to graduate school in 2010 where concept of risk management as applied to cybersecurity caught his attention. It was clear to him that risk management and the primary tool for measuring risk (a risk assessment) was well-suited to make investment decisions related to security. For his capstone project, he developed a unique strategic risk assessment that would lay the foundation for his next professional endeavor.

Rob founded Threat Sketch in 2015 and partnered with a financial and insurance risk expert to continue research and development. Their focus is on the development of cyber risk assessments to solve budgeting and planning problems for small and medium businesses. The addition of his business partner's professional risk-analysis knowledge marked the point where academic research transitioned to a practical tool.

The cybersecurity industry is awash with highly-technical advice, guides, and solutions. But there are few resources for business-minded owners and executives who need to understand the business aspects of managing cyber risk. This book distills Rob's practical and academic knowledge to help the leaders and decision-makers of small companies navigate the management of cyber risk. He is particularly in tune with what resources are available to small businesses and how they need to approach cybersecurity. His background helps him understand the unique constraints businesses of this size face, having worked many years in this industry.