Tech execs just starting to build formal cybersecurity and privacy oversight controls will struggle to keep up with the speed and scope the business expects from their program. In this situation, process standardization and formal decision structures will build the foundation for a sound oversight model that addresses business need. This report helps tech execs address the challenges of the beginning phase of cybersecurity and privacy oversight.