To improve cybersecurity and privacy, tech execs must embed cybersecurity and privacy practices across the business and master four competencies: oversight, process risk management, human risk management, and technology risk management. This report details what advanced firms are doing with their cybersecurity and privacy program to show how all organizations can improve.