The CISO Evolution

Download The CISO Evolution PDF Online Free

Author :
Publisher : John Wiley & Sons
ISBN 13 : 1119782481
Total Pages : 423 pages
Book Rating : 4.1/5 (197 download)

DOWNLOAD NOW!


Book Synopsis The CISO Evolution by : Matthew K. Sharp

Download or read book The CISO Evolution written by Matthew K. Sharp and published by John Wiley & Sons. This book was released on 2022-01-26 with total page 423 pages. Available in PDF, EPUB and Kindle. Book excerpt: Learn to effectively deliver business aligned cybersecurity outcomes In The CISO Evolution: Business Knowledge for Cybersecurity Executives, information security experts Matthew K. Sharp and Kyriakos “Rock” Lambros deliver an insightful and practical resource to help cybersecurity professionals develop the skills they need to effectively communicate with senior management and boards. They assert business aligned cybersecurity is crucial and demonstrate how business acumen is being put into action to deliver meaningful business outcomes. The authors use illustrative stories to show professionals how to establish an executive presence and avoid the most common pitfalls experienced by technology experts when speaking and presenting to executives. The book will show you how to: Inspire trust in senior business leaders by properly aligning and setting expectations around risk appetite and capital allocation Properly characterize the indispensable role of cybersecurity in your company’s overall strategic plan Acquire the necessary funding and resources for your company’s cybersecurity program and avoid the stress and anxiety that comes with underfunding Perfect for security and risk professionals, IT auditors, and risk managers looking for effective strategies to communicate cybersecurity concepts and ideas to business professionals without a background in technology. The CISO Evolution is also a must-read resource for business executives, managers, and leaders hoping to improve the quality of dialogue with their cybersecurity leaders.

The Business - Focused CISO

Download The Business - Focused CISO PDF Online Free

Author :
Publisher :
ISBN 13 :
Total Pages : 0 pages
Book Rating : 4.8/5 (97 download)

DOWNLOAD NOW!


Book Synopsis The Business - Focused CISO by : Don W. Wilson

Download or read book The Business - Focused CISO written by Don W. Wilson and published by . This book was released on 2023-09-22 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt:

The CISO Evolution

Download The CISO Evolution PDF Online Free

Author :
Publisher : John Wiley & Sons
ISBN 13 : 111978249X
Total Pages : 419 pages
Book Rating : 4.1/5 (197 download)

DOWNLOAD NOW!


Book Synopsis The CISO Evolution by : Matthew K. Sharp

Download or read book The CISO Evolution written by Matthew K. Sharp and published by John Wiley & Sons. This book was released on 2022-01-13 with total page 419 pages. Available in PDF, EPUB and Kindle. Book excerpt: Learn to effectively deliver business aligned cybersecurity outcomes In The CISO Evolution: Business Knowledge for Cybersecurity Executives, information security experts Matthew K. Sharp and Kyriakos “Rock” Lambros deliver an insightful and practical resource to help cybersecurity professionals develop the skills they need to effectively communicate with senior management and boards. They assert business aligned cybersecurity is crucial and demonstrate how business acumen is being put into action to deliver meaningful business outcomes. The authors use illustrative stories to show professionals how to establish an executive presence and avoid the most common pitfalls experienced by technology experts when speaking and presenting to executives. The book will show you how to: Inspire trust in senior business leaders by properly aligning and setting expectations around risk appetite and capital allocation Properly characterize the indispensable role of cybersecurity in your company’s overall strategic plan Acquire the necessary funding and resources for your company’s cybersecurity program and avoid the stress and anxiety that comes with underfunding Perfect for security and risk professionals, IT auditors, and risk managers looking for effective strategies to communicate cybersecurity concepts and ideas to business professionals without a background in technology. The CISO Evolution is also a must-read resource for business executives, managers, and leaders hoping to improve the quality of dialogue with their cybersecurity leaders.

The CISO Handbook

Download The CISO Handbook PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 1420031376
Total Pages : 348 pages
Book Rating : 4.4/5 (2 download)

DOWNLOAD NOW!


Book Synopsis The CISO Handbook by : Michael Gentile

Download or read book The CISO Handbook written by Michael Gentile and published by CRC Press. This book was released on 2016-04-19 with total page 348 pages. Available in PDF, EPUB and Kindle. Book excerpt: The CISO Handbook: A Practical Guide to Securing Your Company provides unique insights and guidance into designing and implementing an information security program, delivering true value to the stakeholders of a company. The authors present several essential high-level concepts before building a robust framework that will enable you to map the conc

The Business-Minded CISCO

Download The Business-Minded CISCO PDF Online Free

Author :
Publisher : Business Expert Press
ISBN 13 : 1637426178
Total Pages : 198 pages
Book Rating : 4.6/5 (374 download)

DOWNLOAD NOW!


Book Synopsis The Business-Minded CISCO by : Bryan C. Kissinger

Download or read book The Business-Minded CISCO written by Bryan C. Kissinger and published by Business Expert Press. This book was released on 2024-06-28 with total page 198 pages. Available in PDF, EPUB and Kindle. Book excerpt: The rise of Artificial Intelligence (AI) and Machine Learning (ML) are creating new and unique challenges to corporate security leaders. Internal sanctioned and unsanctioned use of these tools, as well as how threat actors are employing them, requires cyber leaders to think differently. Information technology (IT) risk and information security management remain top of mind for corporate boards and senior business leaders. Continued intensity of cyber terrorism attacks, regulatory and compliance requirements, and customer privacy concerns are driving the need for a business-minded chief information security officer (CISO) to lead organizational efforts to protect critical infrastructure and sensitive data. This book describes the thought process and specific activities a leader should consider as they interview for the IT risk/information security leader role, what they should do within their first 90 days, and how to organize, evangelize, and operate the program once they are into the job. It provides practical, tested strategies for designing your program and guidance to help you be successful long term.

The Business-Minded Chief Information Security Officer

Download The Business-Minded Chief Information Security Officer PDF Online Free

Author :
Publisher :
ISBN 13 : 9781951527501
Total Pages : 144 pages
Book Rating : 4.5/5 (275 download)

DOWNLOAD NOW!


Book Synopsis The Business-Minded Chief Information Security Officer by : Bryan Kissinger

Download or read book The Business-Minded Chief Information Security Officer written by Bryan Kissinger and published by . This book was released on 2020-03-09 with total page 144 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book describes the thought process and specific activities a leader should consider as they interview for the IT risk/information security leader role, what they should do within their first 90 days, and how to organize, evangelize, and operate the program once they are into the job. Information technology (IT) risk and information security management are top of mind for corporate boards and senior business leaders. Continued intensity of cyber terrorism attacks, regulatory and compliance requirements, and customer privacy concerns are driving the need for a business-minded chief information security officer (CISO) to lead organizational efforts to protect critical infrastructure and sensitive data. A CISO must be able to both develop a practical program aligned with overall business goals and objectives and evangelize this plan with key stakeholders across the organization. The modern CISO cannot sit in a bunker somewhere in the IT operations center and expect to achieve buy in and support for the activities required to operate a program. This book describes the thought process and specific activities a leader should consider as they interview for the IT risk/information security leader role, what they should do within their first 90 days, and how to organize, evangelize, and operate the program once they are into the job. It provides practical, tested strategies for designing your program and guidance to help you be successful long term. It is chock full of examples, case studies, and diagrams right out of real corporate information security programs. The Business-Minded Chief Information Security Officer is a handbook for success as you begin this important position within any company.

The Risk Business

Download The Risk Business PDF Online Free

Author :
Publisher :
ISBN 13 : 9781948939133
Total Pages : pages
Book Rating : 4.9/5 (391 download)

DOWNLOAD NOW!


Book Synopsis The Risk Business by : Levi Gundert

Download or read book The Risk Business written by Levi Gundert and published by . This book was released on 2020-02-24 with total page pages. Available in PDF, EPUB and Kindle. Book excerpt:

CISO Leadership

Download CISO Leadership PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 084937944X
Total Pages : 312 pages
Book Rating : 4.8/5 (493 download)

DOWNLOAD NOW!


Book Synopsis CISO Leadership by : Todd Fitzgerald

Download or read book CISO Leadership written by Todd Fitzgerald and published by CRC Press. This book was released on 2007-12-22 with total page 312 pages. Available in PDF, EPUB and Kindle. Book excerpt: Caught in the crosshairs ofLeadership andInformation Technology Information Security professionals are increasingly tapped to operate as business executives. This often puts them on a career path they did not expect, in a field not yet clearly defined. IT training does not usually includemanagerial skills such as leadership, team-building, c

Why CISOs Fail

Download Why CISOs Fail PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 1351986686
Total Pages : 169 pages
Book Rating : 4.3/5 (519 download)

DOWNLOAD NOW!


Book Synopsis Why CISOs Fail by : Barak Engel

Download or read book Why CISOs Fail written by Barak Engel and published by CRC Press. This book was released on 2017-10-16 with total page 169 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book serves as an introduction into the world of security and provides insight into why and how current security management practices fail, resulting in overall dissatisfaction by practitioners and lack of success in the corporate environment. The author examines the reasons and suggests how to fix them. The resulting improvement is highly beneficial to any corporation that chooses to pursue this approach or strategy and from a bottom-line and business operations perspective, not just in technical operations. This book transforms the understanding of the role of the CISO, the selection process for a CISO, and the financial impact that security plays in any organization.

Business-Minded CISO: How to Organize, Evangelize, and Operate an Enterprise-wide IT Risk Management Program

Download Business-Minded CISO: How to Organize, Evangelize, and Operate an Enterprise-wide IT Risk Management Program PDF Online Free

Author :
Publisher :
ISBN 13 : 9781637423813
Total Pages : 0 pages
Book Rating : 4.4/5 (238 download)

DOWNLOAD NOW!


Book Synopsis Business-Minded CISO: How to Organize, Evangelize, and Operate an Enterprise-wide IT Risk Management Program by : Bryan C. Kissinger

Download or read book Business-Minded CISO: How to Organize, Evangelize, and Operate an Enterprise-wide IT Risk Management Program written by Bryan C. Kissinger and published by . This book was released on 2020-03-09 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book describes the thought process and specific activities a leader should consider as they interview for the IT risk/information security leader role, what they should do within their first 90 days, and how to organize, evangelize, and operate the program once they are into the job. Information technology (IT) risk and information security management are top of mind for corporate boards and senior business leaders. Continued intensity of cyber terrorism attacks, regulatory and compliance requirements, and customer privacy concerns are driving the need for a business-minded chief information security officer (CISO) to lead organizational efforts to protect critical infrastructure and sensitive data. A CISO must be able to both develop a practical program aligned with overall business goals and objectives and evangelize this plan with key stakeholders across the organization. The modern CISO cannot sit in a bunker somewhere in the IT operations center and expect to achieve buy in and support for the activities required to operate a program. This book describes the thought process and specific activities a leader should consider as they interview for the IT risk/information security leader role, what they should do within their first 90 days, and how to organize, evangelize, and operate the program once they are into the job. It provides practical, tested strategies for designing your program and guidance to help you be successful long term. It is chock full of examples, case studies, and diagrams right out of real corporate information security programs. The Business-Minded Chief Information Security Officer is a handbook for success as you begin this important position within any company.

The CISO’s Transformation

Download The CISO’s Transformation PDF Online Free

Author :
Publisher : Springer Nature
ISBN 13 : 3030814122
Total Pages : 180 pages
Book Rating : 4.0/5 (38 download)

DOWNLOAD NOW!


Book Synopsis The CISO’s Transformation by : Raj Badhwar

Download or read book The CISO’s Transformation written by Raj Badhwar and published by Springer Nature. This book was released on 2021-10-19 with total page 180 pages. Available in PDF, EPUB and Kindle. Book excerpt: The first section of this book addresses the evolution of CISO (chief information security officer) leadership, with the most mature CISOs combining strong business and technical leadership skills. CISOs can now add significant value when they possess an advanced understanding of cutting-edge security technologies to address the risks from the nearly universal operational dependence of enterprises on the cloud, the Internet, hybrid networks, and third-party technologies demonstrated in this book. In our new cyber threat-saturated world, CISOs have begun to show their market value. Wall Street is more likely to reward companies with good cybersecurity track records with higher stock valuations. To ensure that security is always a foremost concern in business decisions, CISOs should have a seat on corporate boards, and CISOs should be involved from beginning to end in the process of adopting enterprise technologies. The second and third sections of this book focus on building strong security teams, and exercising prudence in cybersecurity. CISOs can foster cultures of respect through careful consideration of the biases inherent in the socio-linguistic frameworks shaping our workplace language and through the cultivation of cyber exceptionalism. CISOs should leave no stone unturned in seeking out people with unique abilities, skills, and experience, and encourage career planning and development, in order to build and retain a strong talent pool. The lessons of the breach of physical security at the US Capitol, the hack back trend, and CISO legal liability stemming from network and data breaches all reveal the importance of good judgment and the necessity of taking proactive stances on preventative measures. This book will target security and IT engineers, administrators and developers, CIOs, CTOs, CISOs, and CFOs. Risk personnel, CROs, IT, security auditors and security researchers will also find this book useful.

CISO COMPASS

Download CISO COMPASS PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 0429677839
Total Pages : 590 pages
Book Rating : 4.4/5 (296 download)

DOWNLOAD NOW!


Book Synopsis CISO COMPASS by : Todd Fitzgerald

Download or read book CISO COMPASS written by Todd Fitzgerald and published by CRC Press. This book was released on 2018-11-21 with total page 590 pages. Available in PDF, EPUB and Kindle. Book excerpt: Todd Fitzgerald, co-author of the ground-breaking (ISC)2 CISO Leadership: Essential Principles for Success, Information Security Governance Simplified: From the Boardroom to the Keyboard, co-author for the E-C Council CISO Body of Knowledge, and contributor to many others including Official (ISC)2 Guide to the CISSP CBK, COBIT 5 for Information Security, and ISACA CSX Cybersecurity Fundamental Certification, is back with this new book incorporating practical experience in leading, building, and sustaining an information security/cybersecurity program. CISO COMPASS includes personal, pragmatic perspectives and lessons learned of over 75 award-winning CISOs, security leaders, professional association leaders, and cybersecurity standard setters who have fought the tough battle. Todd has also, for the first time, adapted the McKinsey 7S framework (strategy, structure, systems, shared values, staff, skills and style) for organizational effectiveness to the practice of leading cybersecurity to structure the content to ensure comprehensive coverage by the CISO and security leaders to key issues impacting the delivery of the cybersecurity strategy and demonstrate to the Board of Directors due diligence. The insights will assist the security leader to create programs appreciated and supported by the organization, capable of industry/ peer award-winning recognition, enhance cybersecurity maturity, gain confidence by senior management, and avoid pitfalls. The book is a comprehensive, soup-to-nuts book enabling security leaders to effectively protect information assets and build award-winning programs by covering topics such as developing cybersecurity strategy, emerging trends and technologies, cybersecurity organization structure and reporting models, leveraging current incidents, security control frameworks, risk management, laws and regulations, data protection and privacy, meaningful policies and procedures, multi-generational workforce team dynamics, soft skills, and communicating with the Board of Directors and executive management. The book is valuable to current and future security leaders as a valuable resource and an integral part of any college program for information/ cybersecurity.

The Frugal CISO

Download The Frugal CISO PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 1482220075
Total Pages : 386 pages
Book Rating : 4.4/5 (822 download)

DOWNLOAD NOW!


Book Synopsis The Frugal CISO by : Kerry Ann Anderson

Download or read book The Frugal CISO written by Kerry Ann Anderson and published by CRC Press. This book was released on 2014-05-19 with total page 386 pages. Available in PDF, EPUB and Kindle. Book excerpt: If you’re an information security professional today, you are being forced to address growing cyber security threats and ever-evolving compliance requirements, while dealing with stagnant and decreasing budgets. The Frugal CISO: Using Innovation and Smart Approaches to Maximize Your Security Posture describes techniques you can immediately put to use to run an effective and efficient information-security management program in today’s cost-cutting environment. The book outlines a strategy for managing the information security function in a manner that optimizes cost efficiency and results. This strategy is designed to work across a wide variety of business sectors and economic conditions and focuses on producing long-term results through investment in people and technology. The text illustrates real-world perspectives that reflect the day-to-day issues that you face in running an enterprise’s security operations. Focused on managing information security programs for long-term operational success, in terms of efficiency, effectiveness, and budgeting ability, this book will help you develop the fiscal proficiency required to navigate the budgeting process. After reading this book you will understand how to manage an information security program with a limited budget, while still maintaining an appropriate level of security controls and meeting compliance requirements. The concepts and methods identified in this book are applicable to a wide variation of teams, regardless of organizational size or budget.

The CISO Perspective - Understand the importance of the CISO in the cyber threat landscape

Download The CISO Perspective - Understand the importance of the CISO in the cyber threat landscape PDF Online Free

Author :
Publisher : IT Governance Ltd
ISBN 13 : 1787784452
Total Pages : 78 pages
Book Rating : 4.7/5 (877 download)

DOWNLOAD NOW!


Book Synopsis The CISO Perspective - Understand the importance of the CISO in the cyber threat landscape by : Barry Kouns

Download or read book The CISO Perspective - Understand the importance of the CISO in the cyber threat landscape written by Barry Kouns and published by IT Governance Ltd. This book was released on 2023-10-17 with total page 78 pages. Available in PDF, EPUB and Kindle. Book excerpt: In this updated edition, the security threat landscape has widened and the challenge for CISOs to be more than just security coordinators has become a mandate for organizational survival. This book challenges and guides information security professionals to think about information security and risk management from the enterprise level, and not just from the IT perspective. Read this book and understand how: The CISO’s role can improve an organization’s cyber strategy. An enterprise’s view of information security, business continuity, compliance, safety, and physical security is crucial for the success of your organisation’s cyber security defense. Soft skills are crucial in order for the CISO to communicate effectively with the Board and other departments in the organisation. Standards such as ISO 27001:2022 can help your organisation implement a suitable ISMS (information security management system). Risk management is imperative to identify, analyze, evaluate and protect the organization’s assets.

CISO Leadership

Download CISO Leadership PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 104006339X
Total Pages : 181 pages
Book Rating : 4.0/5 (4 download)

DOWNLOAD NOW!


Book Synopsis CISO Leadership by : Todd Fitzgerald

Download or read book CISO Leadership written by Todd Fitzgerald and published by CRC Press. This book was released on 2007-12-22 with total page 181 pages. Available in PDF, EPUB and Kindle. Book excerpt: Edited by experts, this book brings together the collective experience of trail blazers. A glance through the contents demonstrates the breadth and depth of coverage, not only in topics included but also in expertise provided by the chapter authors. They are the pioneers, who, while initially making it up as they went along, now provide the next generation a guide to success. This is not a how-to book or a collection of technical data, it does not cover products or technology or provide a recapitulation of the common body of knowledge. Capturing years of hard knocks, success stories, and yes, failures, it delineates information needed and includes from-the-trenches advice on how to have a successful career in this field.

The Aspiring CIO and CISO

Download The Aspiring CIO and CISO PDF Online Free

Author :
Publisher : Packt Publishing Ltd
ISBN 13 : 183546016X
Total Pages : 256 pages
Book Rating : 4.8/5 (354 download)

DOWNLOAD NOW!


Book Synopsis The Aspiring CIO and CISO by : David J. Gee

Download or read book The Aspiring CIO and CISO written by David J. Gee and published by Packt Publishing Ltd. This book was released on 2024-06-28 with total page 256 pages. Available in PDF, EPUB and Kindle. Book excerpt: Strategically build your brand, master soft skills, and craft a powerful plan, propelling yourself into the dynamic world of executive leadership in the digital technology and cybersecurity domain Key Features Discover a targeted 90-day plan to set yourself up for success in both CIO and CISO roles Develop essential interpersonal skills to succeed in executive leadership roles Learn survival skills for thriving and avoiding burnout in strategic roles Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionExplore the intricacies of CIO and CISO roles with The Aspiring CIO and CISO by David Gee. This book leverages Gee's 20+ years of digital and cyber leadership experience, providing real-world insights, making it a valuable resource for those navigating the evolving landscape of the C-suite. Tailored to entry-level, mid-level, and senior managers looking to advance to the C-suite, this book serves a unique purpose in the realm of career guidance. The narrative speaks directly to individuals uncertain about their readiness for CIO or CISO roles, offering a personal mentorship experience that goes beyond technicalities. Armed with insights into crafting a powerful 90-day plan, you'll be well-equipped to catapult into CIO or CISO roles successfully. Beyond technical proficiency, the book instills survival skills, ensuring longevity and helping you prevent burnout in these pivotal positions. Additionally, by mastering the art of brand development and soft skills, you'll grasp the interpersonal dynamics crucial for executive leadership. This book is an indispensable guide for ambitious professionals, offering foresight and empowerment to thrive in the digital age. By the end of this book, you'll emerge with strategic dexterity, confidently steering your career trajectory towards the C-suite.What you will learn Develop a compelling personal brand for CIO and CISO roles Gain mentorship through expert tips, techniques, and proven strategies to navigate executive leadership Be well prepared for interviews, with insights into interview questions as well as questions you can ask Gain insights into managing high-stakes situations and leading your organization through crises Practice leadership through real-life CISO and CIO scenarios Find out how to establish and leverage professional networks crucial for your advancement to CIO or CISO roles Who this book is for This book is for entry-level, mid-level, and senior managers aspiring to ascend to the C-suite as CISOs or CIOs. The book is also aimed at IT and security professionals who want to gain the skills, knowledge, and experience to take on senior executive roles in the digital age.

Managing Risk and Information Security

Download Managing Risk and Information Security PDF Online Free

Author :
Publisher : Apress
ISBN 13 : 143025114X
Total Pages : 145 pages
Book Rating : 4.4/5 (32 download)

DOWNLOAD NOW!


Book Synopsis Managing Risk and Information Security by : Malcolm Harkins

Download or read book Managing Risk and Information Security written by Malcolm Harkins and published by Apress. This book was released on 2013-03-21 with total page 145 pages. Available in PDF, EPUB and Kindle. Book excerpt: Managing Risk and Information Security: Protect to Enable, an ApressOpen title, describes the changing risk environment and why a fresh approach to information security is needed. Because almost every aspect of an enterprise is now dependent on technology, the focus of IT security must shift from locking down assets to enabling the business while managing and surviving risk. This compact book discusses business risk from a broader perspective, including privacy and regulatory considerations. It describes the increasing number of threats and vulnerabilities, but also offers strategies for developing solutions. These include discussions of how enterprises can take advantage of new and emerging technologies—such as social media and the huge proliferation of Internet-enabled devices—while minimizing risk. With ApressOpen, content is freely available through multiple online distribution channels and electronic formats with the goal of disseminating professionally edited and technically reviewed content to the worldwide community. Here are some of the responses from reviewers of this exceptional work: “Managing Risk and Information Security is a perceptive, balanced, and often thought-provoking exploration of evolving information risk and security challenges within a business context. Harkins clearly connects the needed, but often-overlooked linkage and dialog between the business and technical worlds and offers actionable strategies. The book contains eye-opening security insights that are easily understood, even by the curious layman.” Fred Wettling, Bechtel Fellow, IS&T Ethics & Compliance Officer, Bechtel “As disruptive technology innovations and escalating cyber threats continue to create enormous information security challenges, Managing Risk and Information Security: Protect to Enable provides a much-needed perspective. This book compels information security professionals to think differently about concepts of risk management in order to be more effective. The specific and practical guidance offers a fast-track formula for developing information security strategies which are lock-step with business priorities.” Laura Robinson, Principal, Robinson Insight Chair, Security for Business Innovation Council (SBIC) Program Director, Executive Security Action Forum (ESAF) “The mandate of the information security function is being completely rewritten. Unfortunately most heads of security haven’t picked up on the change, impeding their companies’ agility and ability to innovate. This book makes the case for why security needs to change, and shows how to get started. It will be regarded as marking the turning point in information security for years to come.” Dr. Jeremy Bergsman, Practice Manager, CEB “The world we are responsible to protect is changing dramatically and at an accelerating pace. Technology is pervasive in virtually every aspect of our lives. Clouds, virtualization and mobile are redefining computing – and they are just the beginning of what is to come. Your security perimeter is defined by wherever your information and people happen to be. We are attacked by professional adversaries who are better funded than we will ever be. We in the information security profession must change as dramatically as the environment we protect. We need new skills and new strategies to do our jobs effectively. We literally need to change the way we think. Written by one of the best in the business, Managing Risk and Information Security challenges traditional security theory with clear examples of the need for change. It also provides expert advice on how to dramatically increase the success of your security strategy and methods – from dealing with the misperception of risk to how to become a Z-shaped CISO. Managing Risk and Information Security is the ultimate treatise on how to deliver effective security to the world we live in for the next 10 years. It is absolute must reading for anyone in our profession – and should be on the desk of every CISO in the world.” Dave Cullinane, CISSP CEO Security Starfish, LLC “In this overview, Malcolm Harkins delivers an insightful survey of the trends, threats, and tactics shaping information risk and security. From regulatory compliance to psychology to the changing threat context, this work provides a compelling introduction to an important topic and trains helpful attention on the effects of changing technology and management practices.” Dr. Mariano-Florentino Cuéllar Professor, Stanford Law School Co-Director, Stanford Center for International Security and Cooperation (CISAC), Stanford University “Malcolm Harkins gets it. In his new book Malcolm outlines the major forces changing the information security risk landscape from a big picture perspective, and then goes on to offer effective methods of managing that risk from a practitioner's viewpoint. The combination makes this book unique and a must read for anyone interested in IT risk." Dennis Devlin AVP, Information Security and Compliance, The George Washington University “Managing Risk and Information Security is the first-to-read, must-read book on information security for C-Suite executives. It is accessible, understandable and actionable. No sky-is-falling scare tactics, no techno-babble – just straight talk about a critically important subject. There is no better primer on the economics, ergonomics and psycho-behaviourals of security than this.” Thornton May, Futurist, Executive Director & Dean, IT Leadership Academy “Managing Risk and Information Security is a wake-up call for information security executives and a ray of light for business leaders. It equips organizations with the knowledge required to transform their security programs from a “culture of no” to one focused on agility, value and competitiveness. Unlike other publications, Malcolm provides clear and immediately applicable solutions to optimally balance the frequently opposing needs of risk reduction and business growth. This book should be required reading for anyone currently serving in, or seeking to achieve, the role of Chief Information Security Officer.” Jamil Farshchi, Senior Business Leader of Strategic Planning and Initiatives, VISA “For too many years, business and security – either real or imagined – were at odds. In Managing Risk and Information Security: Protect to Enable, you get what you expect – real life practical ways to break logjams, have security actually enable business, and marries security architecture and business architecture. Why this book? It's written by a practitioner, and not just any practitioner, one of the leading minds in Security today.” John Stewart, Chief Security Officer, Cisco “This book is an invaluable guide to help security professionals address risk in new ways in this alarmingly fast changing environment. Packed with examples which makes it a pleasure to read, the book captures practical ways a forward thinking CISO can turn information security into a competitive advantage for their business. This book provides a new framework for managing risk in an entertaining and thought provoking way. This will change the way security professionals work with their business leaders, and help get products to market faster. The 6 irrefutable laws of information security should be on a stone plaque on the desk of every security professional.” Steven Proctor, VP, Audit & Risk Management, Flextronics