Cybersecurity is a business decision, but it is often not treated as one. Current thinking aligns to treating security like magic and security people like wizards who cast spells to protect the organization. If something goes wrong, we blame the wizards. This has led to some very bad decision making and investments. Organizations need to start making business decisions based on the amount they spend and the cybersecurity value delivered in a business context.In this episode, Paul Proctor provides insights and tactics on how to shift cybersecurity from a technology problem to better business decisions about risk.