Never let a Cyber Crisis go to Waste: Learning from Hacks and Cybersecurity Incidents

Cybersecurity is not just about managing risk, it’s also a strategic issue that shapes product capability, organizational effectiveness, and customer relationships. However, many businesses find it challenging to conduct the kind of transformation that embeds security considerations into all business products and processes while maintaining the pace of innovation. For this project, McKinsey asked the Capstone team to develop a framework for analyzing cybersecurity and privacy incidents and conduct meta-analysis on frameworks for analyzing incidents that have business impacts.