Additional menu

Dr. Preston Rich

cyberleadership

The Cyber Collective
The Cyber Collective Empowering leaders, securing the future.
Preston Rich, LLC · dba The Cyber Collective
doc@prestonrich.com · 972.837.7463
🏅 Pioneer · First Scholar to Quantify Ethical Leadership & Organizational Performance
A New Discipline · Originated by Dr. Preston B. Rich · Founder, The Cyber Collective

CyberLeadership

Where Security Strategy Meets Organizational Excellence

Most cybersecurity programs fail — not because of bad technology, but because of bad leadership. CyberLeadership is the discipline Dr. Rich pioneered to close that gap — combining 30+ years of CISO expertise with a Ph.D. in Organizational Management into the first framework that treats security as a leadership problem first, and a technology problem second.

The Problem

Security keeps failing.
And it’s not a
technology problem.

Organizations spend billions on firewalls, SIEM systems, and compliance frameworks — yet breaches keep happening. The reason is almost never the technology. It’s the culture, the governance, the leadership, and the human behaviors that security tools were never designed to fix.

Dr. Rich’s research and three decades of experience prove it: the organizations with the strongest security programs are the ones with the strongest leaders. That insight became the foundation of CyberLeadership.

82% of data breaches involve a human element — phishing, stolen credentials, or social engineering. Technology alone cannot stop human behavior.
$4.9M average cost of a data breach in 2024. Organizations with weak security culture consistently pay more — and recover slower.
68% of CISOs report their biggest challenge is getting leadership buy-in — not technical implementation. Leadership is the bottleneck.
#1 reason security programs fail: lack of executive commitment and organizational alignment. A technology problem with a leadership solution.
The Methodology The Rich CyberLeadership Framework™

A proprietary four-layer methodology integrating risk management, security controls, and organizational leadership — with NIST CSF 2.0 as the immovable core that everything maps back to.

⚠️ Risk Framework Customizable · Client Choice
◆ NIST 800-30 ◆ ISO 27005 / 31000 ◆ COSO ERM ◆ FAIR ◆ CIS RAM
→
Core Framework NIST CSF
2.0 Immovable Core
→
🔧 Control Framework Customizable · Client Choice
◆ CIS Controls v8.1 ◆ NIST 800-53 ◆ NIST 800-171 ◆ ISO 27002 ◆ CSA CCM 4.1
Supported by
THE CYBERLEADERSHIP LAYER · DR. RICH’S ORIGINAL CONTRIBUTION
🏛️CultureSecurity-first values & shared responsibility
📚TrainingRole-based awareness & phishing simulations
🔄Change MgmtImpact assessment & resistance management
🎯MotivationRecognition programs & gamification
👑LeadershipExecutive accountability & board governance
© 2024 Dr. Preston B. Rich · The Rich CyberLeadership Framework™ · All Rights Reserved · Proprietary IP of Preston Rich, LLC
Risk FrameworkCustomizableClient selects best fit for their industry, size, and regulatory environment
NIST CSF 2.0Fixed CoreThe immovable hub — all frameworks map back to the CSF for consistency and auditability
Control FrameworkCustomizableClient selects the control set that fits their technical environment and compliance obligations
Framework Deep Dive Four layers. One cohesive system.
Every element mapped to the core. The power of The Rich CyberLeadership Framework™ is in its interdependencies. Risk informs the core. The core drives control selection. Controls are implemented by people. And the People Framework — the CyberLeadership layer — supports everything.
01
Layer One · CustomizableRisk Framework

Defines the scope of threats and vulnerabilities. Results guide prioritization of all cybersecurity initiatives — giving leadership a defensible basis for every security investment decision.

NIST 800-30 — Risk Management Framework
ISO 27005 — Information Security Risk Management
ISO 31000 — International Risk Management Standard
COSO — Enterprise Risk Management
FAIR — Factor Analysis of Information Risk
02
Layer Two · Fixed · Immovable CoreNIST CSF 2.0

The immovable hub. Provides the structured approach for implementing cybersecurity controls and serves as the universal mapping layer — every risk framework and every control framework maps back to the CSF for consistency, auditability, and regulatory alignment.

Govern → Identify → Protect → Detect → Respond → Recover
03
Layer Three · CustomizableControl Framework

Implements specific security controls that mitigate identified risks. Selected based on the organization’s industry and regulatory obligations — then mapped directly to NIST CSF categories for comprehensive, auditable coverage.

CIS Controls v8.1
NIST 800-53 — Security & Privacy Controls
NIST 800-171 — Protecting Controlled Unclassified Info
ISO 27002 — Information Security Controls
CSA CCM 4.1 — Cloud Controls Matrix
04
Layer Four · Dr. Rich’s DifferentiatorPeople Framework

This is CyberLeadership. While the other three layers address systems and standards, the People Framework addresses the human behaviors that make or break every security program — drawn from Dr. Rich’s doctoral research in Organizational Management.

Security Culture — values, shared responsibility, no-blame reporting
Training & Awareness — role-based, phishing simulations
Change Management — impact assessment, communication planning
Motivation & Incentives — recognition, gamification
Leadership Accountability — roles, metrics, board governance
How to engage Three ways to bring The Rich
CyberLeadership Framework™ to your organization.
Advisory
🧭 Advisory Engagement

Dr. Rich guides your team through implementing the framework — providing the strategy, expertise, and accountability while your team executes. Ideal for organizations with internal IT capacity that need expert direction.

✓Framework assessment and gap analysis
✓Customized implementation roadmap
✓Regular advisory sessions and check-ins
✓Board and executive presentations
Done For You · Most Popular
🛠️ Full Implementation

Dr. Rich implements The Rich CyberLeadership Framework™ end to end — handling everything from risk assessment and framework selection to control implementation, policy development, and people program launch.

✓Complete framework implementation
✓All policy and procedure development
✓Security awareness program launch
✓Ongoing vCISO support
Train the Trainer
🎓 Train-the-Trainer

Dr. Rich trains your internal security team or leadership group to implement and sustain the framework independently. Perfect for larger organizations building internal CyberLeadership capability — or firms wanting to license the methodology.

✓Framework certification training
✓Implementation playbooks & templates
✓Workshop facilitation training
✓Licensed use of framework materials
“The greatest threat to your organization’s security isn’t the hacker outside your walls. It’s the leader inside them who doesn’t understand that security is a leadership responsibility — not an IT problem.”
— Dr. Preston B. Rich, CISSP · Ph.D. · Pioneer of CyberLeadership
Why Dr. Rich · The Credentials Behind the Framework
🏅First scholar to quantitatively measure the relationship between ethical leadership behavior and organizational performance — the research that became the foundation of CyberLeadership.
🛡️30+ years as a working CISO — not an academic theorist. Every element of the framework has been tested in real organizations across five industries.
🎓Active professor at four universities — teaching Ethical Hacking, Cybersecurity Management, and Organizational Behavior simultaneously. Theory and practice, always connected.
📖Published author — Leading: From the Inside Out. The leadership philosophy that underpins the People Framework of The Rich CyberLeadership Framework™.
Ready to lead differently?

Bring The Rich CyberLeadership
Framework™ to your organization.

Whether you choose Advisory, Full Implementation, or Train-the-Trainer — Dr. Rich will personally guide your organization through the only cybersecurity framework built on the principle that great security starts with great leadership.

doc@prestonrich.com · 972.837.7463 · Frisco, TX
The Rich Report by Dr. Preston B. Rich · Founder, The Cyber Collective · The Rich CyberLeadership Framework™
doc@prestonrich.com · 972.837.7463 · Frisco, TX
© 2026 Preston Rich, LLC · All rights reserved
The Rich CyberLeadership Framework™ is proprietary IP of Preston Rich, LLC