We are often pressured to aim high and use "leading practice". This is no different in terms of managing cyber risk. A far more common question that leaders want answered is: "Are we ok? How does everyone else do it?" This session outlines what "ok" looks like, opposed to "good", which is the next step up. The reality is, most organisations are not ok, because they either do nothing, or try to do too much.