This article provides an executive summary of a risk-driven approach to cybersecurity as it applies to custom hardware products.