Find the top consultant
for your next big project.

Greg Boison is a Managing Director and Partner with the Boston Consulting Group, one of the largest management consulting firms in the world. For almost 50 years, BCG has been a pioneer and leader in business strategy, including innovating the growth-share matrix portfolio management framework. Boison serves BCG as the North American leader of Cyber and Federal Technology and BCG’s Center for Digital Government and is also a key leader in BCG’s Federal Corporation. He has spent more than two decades working with international corporations and governments on their most pressing digital topics. Between periods of his career with BCG, Boison worked with Lockheed Martin in a number of executive positions including Director of Homeland & Cyber Security, Director of Energy Programs, and Director of FBI and Justice Programs. He holds an MA in philosophy and social policy from George Washington University and a BA in government and philosophy from Dartmouth College.

Cyber and federal technology, International corporations and governments.

Companies that get cybersecurity right treat it not as an add-on but as something shaped by—and aligned with—business strategy. BCG helps companies focus on digital risk management and cyber risk capabilities that matter most. Cybersecurity and IT risk management are not technology projects. They are business projects with strong tech components. Companies that understand this don’t pursue wide-ranging—and often impossible to implement—cyber roadmaps. They focus on the IT risks and capabilities most relevant to their business strategy. This perspective shapes BCG’s unique approach to cybersecurity and cyber risk. And it’s why a big part of BCG’s work is about enablement: building a foundation for continual improvement. So even when they step out of the picture, companies can keep their cybersecurity strategy and their business strategy aligned. BCG’s Approach to Cyber Risk and Cybersecurity Strategy BCG’s look at cybersecurity through a business lens. Their IT and cyber risk consulting teams help companies identify the digital risks they can and can’t accept. This lets them develop business-driven and risk-aligned capability roadmaps. Companies then focus their efforts—and investments—where they matter most. The process plays out in several phases. Linking cybersecurity strategy to business strategy. Instead of relying on checklists to quantify IT and cyber risk, BCG’s work is to understand risk tolerance in the context of business strategy. Their cybersecurity and digital risk consultants are not just technically proficient; they also possess strong business and risk acumen. They get to the heart of a company’s cybersecurity vision, so that it aligns with the business’s strategy. Building capabilities. BCG uses evidence-based analysis, anchored in their clients’ priorities, to create a customized framework for cybersecurity. BCG’s surgical approach means that a company doesn’t have to be best in class on every element of cybersecurity. In some cases, being good is just fine—and trying to do more could be an inefficient, and even unnecessary, use of resources. Continually assessing, aligning, and improving. BCG’s cyber risk consultants work toward one overarching goal: to enable clients to take ownership of their cybersecurity and risk management. The capabilities, processes, and cyber skills they help develop—and embed through robust change management—allow companies to build on their cyber risk strategy, so it is always in sync with their needs, circumstances, and ambitions.