Book 19 of 141

    From the library

    CISO Desk Reference Guide

    Bill Bonney, Gary Hayslip, Matt Stamper, 2017

    In one paragraph

    A comprehensive reference guide for Chief Information Security Officers, covering cybersecurity leadership, risk management, and strategic security planning in organizations.

    Also tagged

    Cybersecurity
    IT Management

    Where this sits in the operating system

    Systematic Operations

    Systems Over Goals

    Process Documentation

    Systems Over Goals

    Regular Review Rhythms

    Systems Over Goals

    Key insights

    Three authors answer each question separately and disagree, which is more useful than a single confident method.

    Security is presented as a business risk function rather than a technical one, so the artefacts are budgets, boards and reporting lines.

    Its value is as a reference for the first ninety days in the role, not as a book to read through.

    Recognise it early

    The failure and the correction sit side by side deliberately. Read the left column asking whether any of it is already true of you.

    What goes wrong

    Being seen as business blocker instead of enabler

    Security is business enablerposition as competitive advantage and protection

    Focusing on compliance checkboxes instead of risk reduction

    Risk management more important than complianceprioritize actual protection

    Reactive security management instead of proactive prevention

    Invest in threat hunting and proactive measures rather than just incident response

    Poor communication with business stakeholders

    Translate technical risks into business impact language with clear ROI demonstration

    Centralizing security instead of building organizational capability

    People and culture are weakest linksdevelop security responsibility throughout organization

    The same idea, argued differently

    Ryan Daniel Moran

    David Allen

    John Warrillow

    Sam Carpenter

    The full breakdown

    Before you close this

    Naming the specific moment you will act roughly doubles the odds you do.

    Reference

    Author
    Bill Bonney, Gary Hayslip, Matt Stamper
    Published
    2017
    Category
    Business

    We value your privacy

    We use cookies to enhance your experience, analyze site traffic, and personalize content. You can manage your preferences or learn more in our Privacy Policy.