In times like these, attacks are exponentially more prevalent throughout some of our most prominent sectors. For information security leaders who have been working toward the measurement, implementation, and communication of best practices, or who are in the midst of adoption of industry standards such as the NIST CSF, time and resources may be constrained. Thus, prioritizing security initiatives that provide the most resilience against the most frequent attacks is key to an organization’s success. Better yet, communicating these activities in a way that business-side leadership understands is crucial to resourcing activities efficiently and keeping everyone from their employees, to customers, to partners safe.