Cybersecurity

What we do

Assessing risk and resilience
Securing the digital transformation
Establishing crisis response and preparedness
Building long-term cyber capabilities

Examples of our work

Uncovering weaknesses in a global bank’s cybersecurity approach
Helping an oil and gas company with its cybersecurity maturity transformation
Establishing cloud security for a major pharma company
Responding to a tech company’s cyber crisis

Featured experts

Venky Anant
PartnerBay Area
Helps leading high-tech institutions solve their most challenging strategic, digital infrastructure, and security problems
Tucker Bailey
PartnerWashington DC
As a leader in cybersecurity, digital, and advanced analytics, empowers senior leaders in governments, public-sector organizations,...
Ida Kristensen
Senior PartnerNew York
Coleads the Risk & Resilience Practice; advises leading organizations on cybersecurity, strategies for risk management, regulatory...
Jim Boehm
PartnerLondon
Technology risk expert with a deep spike in enterprise cybersecurity, serving mainly financial services institutions
Jan Shelly Brown
PartnerNew Jersey
Helps financial institutions modernize technology to unlock significant cost savings and speed to market while enhancing risk...
Justin Greis
PartnerChicago
Designs, builds, and activates secure and trusted digital transformations to help organizations accelerate their mission and...
Rich Isenberg
PartnerAtlanta
Leads enterprise-wide cybersecurity strategy and operations, with a keen focus on risk management and digital transformation
James Kaplan
PartnerNew York
Helps organizations transform their technology, infrastructure, and cybersecurity for lasting impact
Charlie Lewis
PartnerConnecticut – Darien
Helps leading institutions transform the approach to cybersecurity to protect what matters most and create a secure and sustainable...
Patrick Aron Rinski
PartnerSão Paulo
Advises Latin American organizations on risk at the intersection of business and technology, especially cybersecurity in the...
Marc Sorel
PartnerBoston
Advises private, public, and not-for-profit clients on technology, digital transformation, and cybersecurity topics
David Ware
PartnerWashington DC
Supports digital and analytics transformations in the defense sector, and brings cybersecurity expertise to both private and...

Featured Report

Forrester

McKinsey was named a leader in The Forrester Wave™: Cybersecurity Consulting Services, Q2 2024

Featured Video

Making Cyber Risk a Strategic Priority

Featured Insights

Image of digital light shaped like intricate clockworks.
Report
The cyber clock is ticking: Derisking emerging technologies in financial services
-
Thin metallic wires of different lengths with small lights at their ends bending together against a dark background for added drama.
Commentary
New-business building: Six cybersecurity and digital beliefs that can create risk
-
A grid of dark blue cubes with a mix of glowing blue and magenta binary numbers and orange padlock icons.
Article
The cybersecurity provider’s next opportunity: Making AI safer
-
Big waves breaking against a seawall on the coast
Interview
A board-level view of cyber resilience
-
Abstract image of digital network space cross section.
Article
Boards of directors: The final cybersecurity defense for industrials
-
A wall composed of repeating metal triangular pyramids.
McKinsey Direct
Cracking the code on enhanced digital and cyber risk maturity
-
A view of Washington Monument from the Tidal Basin during daytime and full cherry blossom bloom.
Article
Making the case: How the mid-Atlantic region can become a leading cybersecurity hub
-
Multicolored glowing data over digital landscape.
Article
Product security: Navigating regulations and customer expectations
-
Engineer wearing safety helmet using laptop with oil refinery background
Commentary
How to enhance the cybersecurity of operational technology environments
-
""
Interview
Managing a cyber risk event: ‘Be a student of a crisis’
-
Gary Steele headshot
Interview
Resiliency and leadership in uncertain times: An interview with Splunk’s CEO
-
Man watching abundance of glowing computer monitors
Article
New survey reveals $2 trillion market opportunity for cybersecurity technology and service providers
-
Digital generated image of glowing glass fingerprint icon on black surface. - stock photo
Interview
Building a cybersecurity culture from within: An interview with MongoDB
-
" "
Article
Perspectives on model risk management of cybersecurity solutions in banking
-
" "
Article
Localization of data privacy regulations creates competitive opportunities
-
Candidate is having a conversation at a job interview
Article
Securing your organization by recruiting, hiring, and retaining cybersecurity talent to reduce cyberrisk
-
""
Article
Cybersecurity legislation: Preparing for increased reporting and transparency
-
""
Article
Cybersecurity trends: Looking over the horizon
-
Pipe metal texture inside
Article
Ransomware prevention: How organizations can fight back
-
key
Article
The unsolved opportunities for cybersecurity providers
-
Cyber resilience: Protecting America’s digital infrastructure
Podcast
Cyber resilience: Protecting America’s digital infrastructure
-
Cybersecurity Podcast
Podcast
Cyber Resilience
-
Organizational cyber maturity: A survey of industries
Article
Organizational cyber maturity: A survey of industries
-
Security as code
Article
Security as code: The best (and maybe only) path to securing cloud applications and systems
-
Building cyber resilience in national critical infrastructure
Article
Building cyber resilience in national critical infrastructure
-
Enterprise cybersecurity: Aligning third parties and supply chains
Article
Enterprise cybersecurity: Aligning third parties and supply chains
-
Cybersecurity in Iberia Aligning business and the board
Article
Cybersecurity in Iberia: Aligning business and the board
-
Securing small and medium-size enterprises: What's next?
Article
Securing small and medium-size enterprises: What’s next?
-
Strengthening the  IT security posture in corporates and industrials
Article
Strengthening the IT security posture in corporates and industrials
-
The Latin American energy sector: How to address cybersecurity
Article
The Latin American energy sector: How to address cybersecurity
-
Derisking digital and analytics transformations
Article
Derisking digital and analytics transformations
-
Cybersecurity: Emerging challenges and solutions for the boards of financial-services companies
Article
Cybersecurity: Emerging challenges and solutions for the boards of financial-services companies
-
How CIOs and CTOs can accelerate digital transformations through cloud platforms
Article
How CIOs and CTOs can accelerate digital transformations through cloud platforms
-
Reaching for the cloud: A CEO’s guide
Article - McKinsey Quarterly
Three actions CEOs can take to get value from cloud computing
-
COVID-19 crisis shifts cybersecurity priorities and budgets
Article
COVID-19 crisis shifts cybersecurity priorities and budgets
-
A dual cybersecurity mindset for the next normal
Article
A dual cybersecurity mindset for the next normal
-
Safeguarding against cyberattack in an increasingly digital world
Article
Safeguarding against cyberattack in an increasingly digital world
-
Building security into the customer experience
Article
Building security into the customer experience
-
Cybersecurity in a digital era
Collection
Cybersecurity in a digital era
-
Agile, reliable, secure, compliant IT Fulfilling the promise of DevSecOps
Article
Agile, reliable, secure, compliant IT: Fulfilling the promise of DevSecOps
-
The consumer-data opportunity and the privacy imperative
Article
The consumer-data opportunity and the privacy imperative
-
Cybersecurity tactics for the coronavirus pandemic
Article
Cybersecurity tactics for the coronavirus pandemic
-
Cybersecurity’s dual mission during the coronavirus crisis
Article
Cybersecurity’s dual mission during the coronavirus crisis
-
The cybersecurity posture of financial-services companies: IIF/McKinsey Cyber Resilience Survey
Report
The cybersecurity posture of financial-services companies: IIF/McKinsey Cyber Resilience Survey
-
Protecting the business Views from the CIO's and CISO's offices
Interview
Protecting the business: Views from the CIO’s and CISO’s offices
-
Enhanced cyberrisk reporting: Opening doors to risk-based cybersecurity
Article
Enhanced cyberrisk reporting: Opening doors to risk-based cybersecurity
-
The risk-based approach to cybersecurity
Article
The risk-based approach to cybersecurity
-
Financial crime and fraud in the age of cybersecurity
Article
Financial crime and fraud in the age of cybersecurity
-
Securing software as a service
Article
Securing software as a service
-
How cybersecurity can best support the digital enterprise
Article
Cybersecurity: Linchpin of the digital enterprise
-
Critical infrastructure companies and the global cybersecurity threat
Article
Critical infrastructure companies and the global cybersecurity threat
-
Perspectives on transforming cybersecurity
Collection
Perspectives on transforming cybersecurity
-
Defense of the cyberrealm: How organizations can thwart cyberattacks
Podcast
Defense of the cyberrealm: How organizations can thwart cyberattacks
-
Critical resilience: Adapting infrastructure to repel cyber threats
Article
Critical resilience: Adapting infrastructure to repel cyberthreats
-
Cyberrisk measurement and the holistic cybersecurity approach
Article
Cyber risk measurement and the holistic cybersecurity approach
-
Cybersecurity and the risk function
Article
Cybersecurity and the risk function
-
Insider threat: The human element of cyberrisk
Article
Insider threat: The human element of cyberrisk
-

Related Insights

Critical infrastructure protection more vital than ever, though organizations still lack an understanding of its importance
4 steps to tackling ransomware
Security-as-Code Gains More Support, but Still Nascent
The Wall Street Journal: Hackers May Be Coming for Your City’s Water Supply
CSO Magazine: 6 new ways threat actors will attack in 2021
POWER Magazine: The Energy-Sector Threat: How to Address Cybersecurity Vulnerabilities
CSO Magazine: 7 things to look for in a security awareness training provider

Connect with McKinsey Digital