Since this is fresh in the buffer of my mind, I'm going to make the same suggestion that I did on one of my groups today.
I read Marc Goodman's book immediately after its release in 2015. It's a 600 page tome that I got finished in a matter of days. I literally absorbed all of Goodman's thoughts like a sponge.
And unsurprisingly (because of the title), this is not a fairy tale book, but one that offers a sober perspective on the current and future threats in the online field. Goodman worked with the FBI and Interpol to fight crimes, so his perspective is on point - and non-theoretical.
He talks about a few case studies, some involving ransomware, some involving identity theft, as well as aspects of the Stuxnet case. What makes me recommend this book is that it is relatively non-technical and could probably be understood by any lay audience.
At some point in the book, Goodman makes a few recommendations for ways to prevent falling victim to cyber-crime.
To stay in touch with me, follow 
@cristi
@cristiCristi Vlad Self-Experimenter and Author