Author: Cybellium Ltd
Publisher: Cybellium Ltd
ISBN:
Category : Computers
Languages : en
Pages : 107
Book Description
Unlock the Secrets to Excelling as a Chief Information Security Officer In today's rapidly evolving cybersecurity landscape, the role of the Chief Information Security Officer (CISO) has never been more critical. As the frontline defender of digital assets, the CISO plays a pivotal role in safeguarding organizations against cyber threats. "Mastering CISO" is your comprehensive guide to thriving in this influential position. Inside this transformative book, you will: Gain a comprehensive understanding of the CISO role, responsibilities, and the strategic importance it holds within organizations, from establishing a strong cybersecurity culture to leading incident response efforts. Learn proven strategies for aligning cybersecurity initiatives with business objectives, enabling effective risk management, and developing robust security policies and procedures. Enhance your leadership skills to effectively communicate with executive teams, collaborate with board members, and build strong relationships across various departments. Dive into real-world case studies and practical examples that illustrate successful approaches to cybersecurity leadership, allowing you to apply valuable insights to your own organization. Whether you're an aspiring cybersecurity professional or a seasoned CISO seeking to enhance your skills, this book is your essential resource. Executives, managers, and other professionals looking to collaborate effectively with their organization's cybersecurity leadership will also find valuable insights within these pages.
Mastering the CISO function
Author: Cybellium Ltd
Publisher: Cybellium Ltd
ISBN:
Category : Computers
Languages : en
Pages : 107
Book Description
Unlock the Secrets to Excelling as a Chief Information Security Officer In today's rapidly evolving cybersecurity landscape, the role of the Chief Information Security Officer (CISO) has never been more critical. As the frontline defender of digital assets, the CISO plays a pivotal role in safeguarding organizations against cyber threats. "Mastering CISO" is your comprehensive guide to thriving in this influential position. Inside this transformative book, you will: Gain a comprehensive understanding of the CISO role, responsibilities, and the strategic importance it holds within organizations, from establishing a strong cybersecurity culture to leading incident response efforts. Learn proven strategies for aligning cybersecurity initiatives with business objectives, enabling effective risk management, and developing robust security policies and procedures. Enhance your leadership skills to effectively communicate with executive teams, collaborate with board members, and build strong relationships across various departments. Dive into real-world case studies and practical examples that illustrate successful approaches to cybersecurity leadership, allowing you to apply valuable insights to your own organization. Whether you're an aspiring cybersecurity professional or a seasoned CISO seeking to enhance your skills, this book is your essential resource. Executives, managers, and other professionals looking to collaborate effectively with their organization's cybersecurity leadership will also find valuable insights within these pages.
Publisher: Cybellium Ltd
ISBN:
Category : Computers
Languages : en
Pages : 107
Book Description
Unlock the Secrets to Excelling as a Chief Information Security Officer In today's rapidly evolving cybersecurity landscape, the role of the Chief Information Security Officer (CISO) has never been more critical. As the frontline defender of digital assets, the CISO plays a pivotal role in safeguarding organizations against cyber threats. "Mastering CISO" is your comprehensive guide to thriving in this influential position. Inside this transformative book, you will: Gain a comprehensive understanding of the CISO role, responsibilities, and the strategic importance it holds within organizations, from establishing a strong cybersecurity culture to leading incident response efforts. Learn proven strategies for aligning cybersecurity initiatives with business objectives, enabling effective risk management, and developing robust security policies and procedures. Enhance your leadership skills to effectively communicate with executive teams, collaborate with board members, and build strong relationships across various departments. Dive into real-world case studies and practical examples that illustrate successful approaches to cybersecurity leadership, allowing you to apply valuable insights to your own organization. Whether you're an aspiring cybersecurity professional or a seasoned CISO seeking to enhance your skills, this book is your essential resource. Executives, managers, and other professionals looking to collaborate effectively with their organization's cybersecurity leadership will also find valuable insights within these pages.
The CISO’s Next Frontier
Author: Raj Badhwar
Publisher: Springer Nature
ISBN: 3030753549
Category : Computers
Languages : en
Pages : 398
Book Description
This book provides an advanced understanding of cyber threats as well as the risks companies are facing. It includes a detailed analysis of many technologies and approaches important to decreasing, mitigating or remediating those threats and risks. Cyber security technologies discussed in this book are futuristic and current. Advanced security topics such as secure remote work, data security, network security, application and device security, cloud security, and cyber risk and privacy are presented in this book. At the end of every chapter, an evaluation of the topic from a CISO’s perspective is provided. This book also addresses quantum computing, artificial intelligence and machine learning for cyber security The opening chapters describe the power and danger of quantum computing, proposing two solutions for protection from probable quantum computer attacks: the tactical enhancement of existing algorithms to make them quantum-resistant, and the strategic implementation of quantum-safe algorithms and cryptosystems. The following chapters make the case for using supervised and unsupervised AI/ML to develop predictive, prescriptive, cognitive and auto-reactive threat detection, mitigation, and remediation capabilities against advanced attacks perpetrated by sophisticated threat actors, APT and polymorphic/metamorphic malware. CISOs must be concerned about current on-going sophisticated cyber-attacks, and can address them with advanced security measures. The latter half of this book discusses some current sophisticated cyber-attacks and available protective measures enabled by the advancement of cybersecurity capabilities in various IT domains. Chapters 6-10 discuss secure remote work; chapters 11-17, advanced data security paradigms; chapters 18-28, Network Security; chapters 29-35, application and device security; chapters 36-39, Cloud security; and chapters 40-46 organizational cyber risk measurement and event probability. Security and IT engineers, administrators and developers, CIOs, CTOs, CISOs, and CFOs will want to purchase this book. Risk personnel, CROs, IT and Security Auditors as well as security researchers and journalists will also find this useful.
Publisher: Springer Nature
ISBN: 3030753549
Category : Computers
Languages : en
Pages : 398
Book Description
This book provides an advanced understanding of cyber threats as well as the risks companies are facing. It includes a detailed analysis of many technologies and approaches important to decreasing, mitigating or remediating those threats and risks. Cyber security technologies discussed in this book are futuristic and current. Advanced security topics such as secure remote work, data security, network security, application and device security, cloud security, and cyber risk and privacy are presented in this book. At the end of every chapter, an evaluation of the topic from a CISO’s perspective is provided. This book also addresses quantum computing, artificial intelligence and machine learning for cyber security The opening chapters describe the power and danger of quantum computing, proposing two solutions for protection from probable quantum computer attacks: the tactical enhancement of existing algorithms to make them quantum-resistant, and the strategic implementation of quantum-safe algorithms and cryptosystems. The following chapters make the case for using supervised and unsupervised AI/ML to develop predictive, prescriptive, cognitive and auto-reactive threat detection, mitigation, and remediation capabilities against advanced attacks perpetrated by sophisticated threat actors, APT and polymorphic/metamorphic malware. CISOs must be concerned about current on-going sophisticated cyber-attacks, and can address them with advanced security measures. The latter half of this book discusses some current sophisticated cyber-attacks and available protective measures enabled by the advancement of cybersecurity capabilities in various IT domains. Chapters 6-10 discuss secure remote work; chapters 11-17, advanced data security paradigms; chapters 18-28, Network Security; chapters 29-35, application and device security; chapters 36-39, Cloud security; and chapters 40-46 organizational cyber risk measurement and event probability. Security and IT engineers, administrators and developers, CIOs, CTOs, CISOs, and CFOs will want to purchase this book. Risk personnel, CROs, IT and Security Auditors as well as security researchers and journalists will also find this useful.
Cybersecurity For Dummies
Author: Joseph Steinberg
Publisher: John Wiley & Sons
ISBN: 1119560322
Category : Computers
Languages : en
Pages : 368
Book Description
Protect your business and family against cyber attacks Cybersecurity is the protection against the unauthorized or criminal use of electronic data and the practice of ensuring the integrity, confidentiality, and availability of information. Being "cyber-secure" means that a person or organization has both protected itself against attacks by cyber criminals and other online scoundrels, and ensured that it has the ability to recover if it is attacked. If keeping your business or your family safe from cybersecurity threats is on your to-do list, Cybersecurity For Dummies will introduce you to the basics of becoming cyber-secure! You’ll learn what threats exist, and how to identify, protect against, detect, and respond to these threats, as well as how to recover if you have been breached! The who and why of cybersecurity threats Basic cybersecurity concepts What to do to be cyber-secure Cybersecurity careers What to think about to stay cybersecure in the future Now is the time to identify vulnerabilities that may make you a victim of cyber-crime — and to defend yourself before it is too late.
Publisher: John Wiley & Sons
ISBN: 1119560322
Category : Computers
Languages : en
Pages : 368
Book Description
Protect your business and family against cyber attacks Cybersecurity is the protection against the unauthorized or criminal use of electronic data and the practice of ensuring the integrity, confidentiality, and availability of information. Being "cyber-secure" means that a person or organization has both protected itself against attacks by cyber criminals and other online scoundrels, and ensured that it has the ability to recover if it is attacked. If keeping your business or your family safe from cybersecurity threats is on your to-do list, Cybersecurity For Dummies will introduce you to the basics of becoming cyber-secure! You’ll learn what threats exist, and how to identify, protect against, detect, and respond to these threats, as well as how to recover if you have been breached! The who and why of cybersecurity threats Basic cybersecurity concepts What to do to be cyber-secure Cybersecurity careers What to think about to stay cybersecure in the future Now is the time to identify vulnerabilities that may make you a victim of cyber-crime — and to defend yourself before it is too late.
CISO Leadership
Author: Todd Fitzgerald
Publisher: CRC Press
ISBN: 084937944X
Category : Business & Economics
Languages : en
Pages : 312
Book Description
Caught in the crosshairs ofLeadership andInformation Technology Information Security professionals are increasingly tapped to operate as business executives. This often puts them on a career path they did not expect, in a field not yet clearly defined. IT training does not usually includemanagerial skills such as leadership, team-building, c
Publisher: CRC Press
ISBN: 084937944X
Category : Business & Economics
Languages : en
Pages : 312
Book Description
Caught in the crosshairs ofLeadership andInformation Technology Information Security professionals are increasingly tapped to operate as business executives. This often puts them on a career path they did not expect, in a field not yet clearly defined. IT training does not usually includemanagerial skills such as leadership, team-building, c
The CISO Evolution
Author: Matthew K. Sharp
Publisher: John Wiley & Sons
ISBN: 1119782481
Category : Computers
Languages : en
Pages : 423
Book Description
Learn to effectively deliver business aligned cybersecurity outcomes In The CISO Evolution: Business Knowledge for Cybersecurity Executives, information security experts Matthew K. Sharp and Kyriakos “Rock” Lambros deliver an insightful and practical resource to help cybersecurity professionals develop the skills they need to effectively communicate with senior management and boards. They assert business aligned cybersecurity is crucial and demonstrate how business acumen is being put into action to deliver meaningful business outcomes. The authors use illustrative stories to show professionals how to establish an executive presence and avoid the most common pitfalls experienced by technology experts when speaking and presenting to executives. The book will show you how to: Inspire trust in senior business leaders by properly aligning and setting expectations around risk appetite and capital allocation Properly characterize the indispensable role of cybersecurity in your company’s overall strategic plan Acquire the necessary funding and resources for your company’s cybersecurity program and avoid the stress and anxiety that comes with underfunding Perfect for security and risk professionals, IT auditors, and risk managers looking for effective strategies to communicate cybersecurity concepts and ideas to business professionals without a background in technology. The CISO Evolution is also a must-read resource for business executives, managers, and leaders hoping to improve the quality of dialogue with their cybersecurity leaders.
Publisher: John Wiley & Sons
ISBN: 1119782481
Category : Computers
Languages : en
Pages : 423
Book Description
Learn to effectively deliver business aligned cybersecurity outcomes In The CISO Evolution: Business Knowledge for Cybersecurity Executives, information security experts Matthew K. Sharp and Kyriakos “Rock” Lambros deliver an insightful and practical resource to help cybersecurity professionals develop the skills they need to effectively communicate with senior management and boards. They assert business aligned cybersecurity is crucial and demonstrate how business acumen is being put into action to deliver meaningful business outcomes. The authors use illustrative stories to show professionals how to establish an executive presence and avoid the most common pitfalls experienced by technology experts when speaking and presenting to executives. The book will show you how to: Inspire trust in senior business leaders by properly aligning and setting expectations around risk appetite and capital allocation Properly characterize the indispensable role of cybersecurity in your company’s overall strategic plan Acquire the necessary funding and resources for your company’s cybersecurity program and avoid the stress and anxiety that comes with underfunding Perfect for security and risk professionals, IT auditors, and risk managers looking for effective strategies to communicate cybersecurity concepts and ideas to business professionals without a background in technology. The CISO Evolution is also a must-read resource for business executives, managers, and leaders hoping to improve the quality of dialogue with their cybersecurity leaders.
Mastering the CISM function
Author: Cybellium Ltd
Publisher: Cybellium Ltd
ISBN:
Category : Computers
Languages : en
Pages : 100
Book Description
Unlock the Secrets to CISM Certification and Excel in Information Security Management In the fast-paced world of cybersecurity, the Certified Information Security Manager (CISM) certification has emerged as a gold standard for professionals seeking to validate their expertise in information security management. "Mastering CISM" by Kris Hermans is your definitive guide to achieving CISM certification and advancing your cybersecurity career. Inside this comprehensive book, you will: Gain a deep understanding of the four domains covered in the CISM exam: Information Security Governance, Information Risk Management, Information Security Program Development and Management, and Information Security Incident Management. Prepare effectively for the CISM exam with exam-focused content, including practice questions, sample scenarios, and expert exam tips. Explore real-world case studies and practical examples that demonstrate the application of CISM principles in diverse organizational contexts. Understand the value of the CISM certification in the cybersecurity industry and discover career paths and opportunities available to CISM-certified professionals. Authored by Kris Hermans, a highly respected authority in the field, "Mastering CISM" combines extensive experience in information security management and a passion for helping professionals succeed in their certification goals. Kris's expertise shines through as they guide readers through the intricacies of the CISM domains, equipping them with the knowledge and insights needed to excel. Whether you're an aspiring cybersecurity professional or a seasoned practitioner looking to validate your expertise, "Mastering CISM" is your essential resource. Managers, executives, and organizations will also benefit from understanding the value of CISM certification and the role it plays in enhancing information security management practices. Achieve CISM certification and propel your career in information security management. Order your copy of "Mastering CISM" today and equip yourself with the knowledge and tools to excel in the dynamic world of cybersecurity.
Publisher: Cybellium Ltd
ISBN:
Category : Computers
Languages : en
Pages : 100
Book Description
Unlock the Secrets to CISM Certification and Excel in Information Security Management In the fast-paced world of cybersecurity, the Certified Information Security Manager (CISM) certification has emerged as a gold standard for professionals seeking to validate their expertise in information security management. "Mastering CISM" by Kris Hermans is your definitive guide to achieving CISM certification and advancing your cybersecurity career. Inside this comprehensive book, you will: Gain a deep understanding of the four domains covered in the CISM exam: Information Security Governance, Information Risk Management, Information Security Program Development and Management, and Information Security Incident Management. Prepare effectively for the CISM exam with exam-focused content, including practice questions, sample scenarios, and expert exam tips. Explore real-world case studies and practical examples that demonstrate the application of CISM principles in diverse organizational contexts. Understand the value of the CISM certification in the cybersecurity industry and discover career paths and opportunities available to CISM-certified professionals. Authored by Kris Hermans, a highly respected authority in the field, "Mastering CISM" combines extensive experience in information security management and a passion for helping professionals succeed in their certification goals. Kris's expertise shines through as they guide readers through the intricacies of the CISM domains, equipping them with the knowledge and insights needed to excel. Whether you're an aspiring cybersecurity professional or a seasoned practitioner looking to validate your expertise, "Mastering CISM" is your essential resource. Managers, executives, and organizations will also benefit from understanding the value of CISM certification and the role it plays in enhancing information security management practices. Achieve CISM certification and propel your career in information security management. Order your copy of "Mastering CISM" today and equip yourself with the knowledge and tools to excel in the dynamic world of cybersecurity.
Cybersecurity Leadership Demystified
Author: Dr. Erdal Ozkaya
Publisher: Packt Publishing Ltd
ISBN: 1801819599
Category : Computers
Languages : en
Pages : 274
Book Description
Gain useful insights into cybersecurity leadership in a modern-day organization with the help of use cases Key FeaturesDiscover tips and expert advice from the leading CISO and author of many cybersecurity booksBecome well-versed with a CISO's day-to-day responsibilities and learn how to perform them with easeUnderstand real-world challenges faced by a CISO and find out the best way to solve themBook Description The chief information security officer (CISO) is responsible for an organization's information and data security. The CISO's role is challenging as it demands a solid technical foundation as well as effective communication skills. This book is for busy cybersecurity leaders and executives looking to gain deep insights into the domains important for becoming a competent cybersecurity leader. The book begins by introducing you to the CISO's role, where you'll learn key definitions, explore the responsibilities involved, and understand how you can become an efficient CISO. You'll then be taken through end-to-end security operations and compliance standards to help you get to grips with the security landscape. In order to be a good leader, you'll need a good team. This book guides you in building your dream team by familiarizing you with HR management, documentation, and stakeholder onboarding. Despite taking all that care, you might still fall prey to cyber attacks; this book will show you how to quickly respond to an incident to help your organization minimize losses, decrease vulnerabilities, and rebuild services and processes. Finally, you'll explore other key CISO skills that'll help you communicate at both senior and operational levels. By the end of this book, you'll have gained a complete understanding of the CISO's role and be ready to advance your career. What you will learnUnderstand the key requirements to become a successful CISOExplore the cybersecurity landscape and get to grips with end-to-end security operationsAssimilate compliance standards, governance, and security frameworksFind out how to hire the right talent and manage hiring procedures and budgetDocument the approaches and processes for HR, compliance, and related domainsFamiliarize yourself with incident response, disaster recovery, and business continuityGet the hang of tasks and skills other than hardcore security operationsWho this book is for This book is for aspiring as well as existing CISOs. This book will also help cybersecurity leaders and security professionals understand leadership in this domain and motivate them to become leaders. A clear understanding of cybersecurity posture and a few years of experience as a cybersecurity professional will help you to get the most out of this book.
Publisher: Packt Publishing Ltd
ISBN: 1801819599
Category : Computers
Languages : en
Pages : 274
Book Description
Gain useful insights into cybersecurity leadership in a modern-day organization with the help of use cases Key FeaturesDiscover tips and expert advice from the leading CISO and author of many cybersecurity booksBecome well-versed with a CISO's day-to-day responsibilities and learn how to perform them with easeUnderstand real-world challenges faced by a CISO and find out the best way to solve themBook Description The chief information security officer (CISO) is responsible for an organization's information and data security. The CISO's role is challenging as it demands a solid technical foundation as well as effective communication skills. This book is for busy cybersecurity leaders and executives looking to gain deep insights into the domains important for becoming a competent cybersecurity leader. The book begins by introducing you to the CISO's role, where you'll learn key definitions, explore the responsibilities involved, and understand how you can become an efficient CISO. You'll then be taken through end-to-end security operations and compliance standards to help you get to grips with the security landscape. In order to be a good leader, you'll need a good team. This book guides you in building your dream team by familiarizing you with HR management, documentation, and stakeholder onboarding. Despite taking all that care, you might still fall prey to cyber attacks; this book will show you how to quickly respond to an incident to help your organization minimize losses, decrease vulnerabilities, and rebuild services and processes. Finally, you'll explore other key CISO skills that'll help you communicate at both senior and operational levels. By the end of this book, you'll have gained a complete understanding of the CISO's role and be ready to advance your career. What you will learnUnderstand the key requirements to become a successful CISOExplore the cybersecurity landscape and get to grips with end-to-end security operationsAssimilate compliance standards, governance, and security frameworksFind out how to hire the right talent and manage hiring procedures and budgetDocument the approaches and processes for HR, compliance, and related domainsFamiliarize yourself with incident response, disaster recovery, and business continuityGet the hang of tasks and skills other than hardcore security operationsWho this book is for This book is for aspiring as well as existing CISOs. This book will also help cybersecurity leaders and security professionals understand leadership in this domain and motivate them to become leaders. A clear understanding of cybersecurity posture and a few years of experience as a cybersecurity professional will help you to get the most out of this book.
Information Security Management with ITIL® V3
Author: Jacques Cazemier
Publisher: Van Haren
ISBN: 940180124X
Category : Architecture
Languages : en
Pages : 145
Book Description
This groundbreaking new title looks at Information Security from defining what security measures positively support the business, to implementation to maintaining the required level and anticipating required changes. It covers: Fundamentals of information security providing readers insight and give background about what is going to be managed. Topics covered include: types of security controls, business benefits and the perspectives of business, customers, partners, service providers, and auditors. Fundamentals of management of information security - explains what information security management is about and its objectives. Details are also given on implementing the process and the continuous effort required to maintain its quality. ITIL V3 and Information Security Management - shows the links with the other ITIL processes. Shows how integrating the Information Security Management activities into existing processes and activities not only supports efficiencies but ultimately is the key way to achieve effective Information Security Management. Implementing Information Security Management - gives practical advice how to put Information Security Management into practice. From awareness in the organization via documentation required to maturity models; this guidance describes best practices for realizing Information Security Management.
Publisher: Van Haren
ISBN: 940180124X
Category : Architecture
Languages : en
Pages : 145
Book Description
This groundbreaking new title looks at Information Security from defining what security measures positively support the business, to implementation to maintaining the required level and anticipating required changes. It covers: Fundamentals of information security providing readers insight and give background about what is going to be managed. Topics covered include: types of security controls, business benefits and the perspectives of business, customers, partners, service providers, and auditors. Fundamentals of management of information security - explains what information security management is about and its objectives. Details are also given on implementing the process and the continuous effort required to maintain its quality. ITIL V3 and Information Security Management - shows the links with the other ITIL processes. Shows how integrating the Information Security Management activities into existing processes and activities not only supports efficiencies but ultimately is the key way to achieve effective Information Security Management. Implementing Information Security Management - gives practical advice how to put Information Security Management into practice. From awareness in the organization via documentation required to maturity models; this guidance describes best practices for realizing Information Security Management.
The Security Leader’s Communication Playbook
Author: Jeffrey W. Brown
Publisher: CRC Press
ISBN: 1000440273
Category : Business & Economics
Languages : en
Pages : 395
Book Description
This book is for cybersecurity leaders across all industries and organizations. It is intended to bridge the gap between the data center and the board room. This book examines the multitude of communication challenges that CISOs are faced with every day and provides practical tools to identify your audience, tailor your message and master the art of communicating. Poor communication is one of the top reasons that CISOs fail in their roles. By taking the step to work on your communication and soft skills (the two go hand-in-hand), you will hopefully never join their ranks. This is not a “communication theory” book. It provides just enough practical skills and techniques for security leaders to get the job done. Learn fundamental communication skills and how to apply them to day-to-day challenges like communicating with your peers, your team, business leaders and the board of directors. Learn how to produce meaningful metrics and communicate before, during and after an incident. Regardless of your role in Tech, you will find something of value somewhere along the way in this book.
Publisher: CRC Press
ISBN: 1000440273
Category : Business & Economics
Languages : en
Pages : 395
Book Description
This book is for cybersecurity leaders across all industries and organizations. It is intended to bridge the gap between the data center and the board room. This book examines the multitude of communication challenges that CISOs are faced with every day and provides practical tools to identify your audience, tailor your message and master the art of communicating. Poor communication is one of the top reasons that CISOs fail in their roles. By taking the step to work on your communication and soft skills (the two go hand-in-hand), you will hopefully never join their ranks. This is not a “communication theory” book. It provides just enough practical skills and techniques for security leaders to get the job done. Learn fundamental communication skills and how to apply them to day-to-day challenges like communicating with your peers, your team, business leaders and the board of directors. Learn how to produce meaningful metrics and communicate before, during and after an incident. Regardless of your role in Tech, you will find something of value somewhere along the way in this book.
CISO COMPASS
Author: Todd Fitzgerald
Publisher: CRC Press
ISBN: 0429677839
Category : Computers
Languages : en
Pages : 580
Book Description
Todd Fitzgerald, co-author of the ground-breaking (ISC)2 CISO Leadership: Essential Principles for Success, Information Security Governance Simplified: From the Boardroom to the Keyboard, co-author for the E-C Council CISO Body of Knowledge, and contributor to many others including Official (ISC)2 Guide to the CISSP CBK, COBIT 5 for Information Security, and ISACA CSX Cybersecurity Fundamental Certification, is back with this new book incorporating practical experience in leading, building, and sustaining an information security/cybersecurity program. CISO COMPASS includes personal, pragmatic perspectives and lessons learned of over 75 award-winning CISOs, security leaders, professional association leaders, and cybersecurity standard setters who have fought the tough battle. Todd has also, for the first time, adapted the McKinsey 7S framework (strategy, structure, systems, shared values, staff, skills and style) for organizational effectiveness to the practice of leading cybersecurity to structure the content to ensure comprehensive coverage by the CISO and security leaders to key issues impacting the delivery of the cybersecurity strategy and demonstrate to the Board of Directors due diligence. The insights will assist the security leader to create programs appreciated and supported by the organization, capable of industry/ peer award-winning recognition, enhance cybersecurity maturity, gain confidence by senior management, and avoid pitfalls. The book is a comprehensive, soup-to-nuts book enabling security leaders to effectively protect information assets and build award-winning programs by covering topics such as developing cybersecurity strategy, emerging trends and technologies, cybersecurity organization structure and reporting models, leveraging current incidents, security control frameworks, risk management, laws and regulations, data protection and privacy, meaningful policies and procedures, multi-generational workforce team dynamics, soft skills, and communicating with the Board of Directors and executive management. The book is valuable to current and future security leaders as a valuable resource and an integral part of any college program for information/ cybersecurity.
Publisher: CRC Press
ISBN: 0429677839
Category : Computers
Languages : en
Pages : 580
Book Description
Todd Fitzgerald, co-author of the ground-breaking (ISC)2 CISO Leadership: Essential Principles for Success, Information Security Governance Simplified: From the Boardroom to the Keyboard, co-author for the E-C Council CISO Body of Knowledge, and contributor to many others including Official (ISC)2 Guide to the CISSP CBK, COBIT 5 for Information Security, and ISACA CSX Cybersecurity Fundamental Certification, is back with this new book incorporating practical experience in leading, building, and sustaining an information security/cybersecurity program. CISO COMPASS includes personal, pragmatic perspectives and lessons learned of over 75 award-winning CISOs, security leaders, professional association leaders, and cybersecurity standard setters who have fought the tough battle. Todd has also, for the first time, adapted the McKinsey 7S framework (strategy, structure, systems, shared values, staff, skills and style) for organizational effectiveness to the practice of leading cybersecurity to structure the content to ensure comprehensive coverage by the CISO and security leaders to key issues impacting the delivery of the cybersecurity strategy and demonstrate to the Board of Directors due diligence. The insights will assist the security leader to create programs appreciated and supported by the organization, capable of industry/ peer award-winning recognition, enhance cybersecurity maturity, gain confidence by senior management, and avoid pitfalls. The book is a comprehensive, soup-to-nuts book enabling security leaders to effectively protect information assets and build award-winning programs by covering topics such as developing cybersecurity strategy, emerging trends and technologies, cybersecurity organization structure and reporting models, leveraging current incidents, security control frameworks, risk management, laws and regulations, data protection and privacy, meaningful policies and procedures, multi-generational workforce team dynamics, soft skills, and communicating with the Board of Directors and executive management. The book is valuable to current and future security leaders as a valuable resource and an integral part of any college program for information/ cybersecurity.