Fight fire with fire : proactive cybersecurity strategies for today's leaders / Renee Tarun.

Format:

Book

Author/Creator:

Tarun, Renee, author.

Language:

English

Subjects (All):

Computer security.

Information technology--Security measures.

Information technology.

Physical Description:

1 online resource (241 pages)

Place of Publication:

Indianapolis, Indiana : John Wiley and Sons, [2021]

Summary:

Organizations around the world are in a struggle for survival, racing to transform themselves in a herculean effort to adapt to the digital age, all while protecting themselves from headline-grabbing cybersecurity threats. As organizations succeed or fail, the centrality and importance of cybersecurity and the role of the CISO--Chief Information Security Officer--becomes ever more apparent. It's becoming clear that the CISO, which began as a largely technical role, has become nuanced, strategic, and a cross-functional leadership position. Fight Fire with Fire: Proactive Cybersecurity Strategies for Today's Leaders explores the evolution of the CISO's responsibilities and delivers a blueprint to effectively improve cybersecurity across an organization. Fight Fire with Fire draws on the deep experience of its many all-star contributors. For example: Learn how to talk effectively with the Board from engineer-turned-executive Marianne Bailey, a top spokesperson well-known for global leadership in cyber Discover how to manage complex cyber supply chain risk with Terry Roberts, who addresses this complex area using cutting-edge technology and emerging standards Tame the exploding IoT threat landscape with Sonia Arista, a CISO with decades of experience across sectors, including healthcare where edge devices monitor vital signs and robots perform surgery These are just a few of the global trailblazers in cybersecurity who have banded together to equip today's leaders to protect their enterprises and inspire tomorrow's leaders to join them. With fires blazing on the horizon, there is no time for a seminar or boot camp. Cyber leaders need information at their fingertips. Readers will find insight on how to close the diversity and skills gap and become well-versed in modern cyber threats, including attacks coming from organized crime and nation-states. This book highlights a three-pronged approach that encompasses people, process, and technology to empower everyone to protect their organization. From effective risk management to supply chain security and communicating with the board, Fight Fire with Fire presents discussions from industry leaders that cover every critical competency in information security. Perfect for IT and information security professionals seeking perspectives and insights they can't find in certification exams or standard textbooks, Fight Fire with Fire is an indispensable resource for everyone hoping to improve their understanding of the realities of modern cybersecurity through the eyes of today's top security leaders.

Contents:

Intro

Title Page

Copyright Page

About the Author

Acknowledgments

Contents

Introduction

How Can We Be Effective CISOs?

Who This Book Is For

Part 1 People

Chapter 1 From Technologist to Strategist

A Path to CISO

Responsibilities of a CISO

CISO Archetypes

Evolution of the CISO Role

Technical Strengths Versus Security Officer Strengths

Chapter 2 Communicating with the Board

The Board

Speak Their Language

Preparing for the Board Meeting

Keep It Direct, Crisp, and Simple

Working Directly for the Board: The Ultimate Case Study

The Power of One-on-One Meetings

Get to Know Your Board

Chapter 3 Building a Culture of Security

The Building Blocks of the Journey

Program and Cultural Foundation

Program Build and Cultural Engagement

Target Maturity and Cultural Enlightenment

Reaching Trusted Advisor

Conclusion

Chapter 4 Who Is Behind the Evolving Threat Landscape?

Cyberattacks: Who Is Behind External Threats?

Key Tactics

The Insider Threat

Chapter 5 Addressing the Skills and Diversity Gap

Assessing the Skills Gap

Assessing the Diversity Gap

The Power of Diverse Teams

Bridging the Skills and Diversity Gaps

Advice for Those Starting a Career in Cybersecurity

To Move Up, Think Outside the Box

Part 2 Process

Chapter 6 Effective Cyber Risk Management Requires Broad Collaboration

Understanding Your Organization's Risk Appetite

Measuring Actual Risk Against Risk Appetite

How to Engage in Governance and Oversight of Cyber Risk

Thinking Strategically About Potential Risks

Reducing Risk by Sharing Information

Reducing Risk Through Cyber Insurance

In Closing

Chapter 7 Blending NOC and SOC

The Vision

The Danger of Blending Superficially or Too Quickly.

NOC and SOC Focus on Different Issues

Approaches to Blending NOC and SOC

Breaking Down Silos to Build Teams

Working with Executive Leadership

Processes for Integrating the NOC and SOC

Technology for Improved Incident Response

A Smooth but Slow Transition

Chapter 8 Security by Design

What Is Secure Development? What Does It Encompass?

Skipping Ahead to Process and Technology-Wait, What?

People

Chapter 9 From Enforcer to Strategic Partner

Information Governance Council: Oversight That Works

Automating Compliance

Delivering Value in a Changing Environment

Evolve Your Use of Maturity Frameworks

Conclude with a Culture of Compliance

Chapter 10 Don't Let Cyber Supply Chain Security Be Your Weakest Link

What Does C-SCRM Encompass?

The Ultimate Moving Target

The Expansion of Software-Based Functionality

People: It Takes a Village

Process: It Takes a Framework

Technology: It Takes Automation

Features to Look for in a Modern C-SCRM Solution

Change Management: It Comes Back to the Village

Part 3 Technology

Chapter 11 Cybersecurity in the Cloud

Complexity, Meet Vulnerability

More (Vendors &amp

Connectivity) But Not Merrier

More Risk, Same Budget

Who Is Ultimately Responsible?

Chapter 12 The Convergence of Cyber and Physical

Expanding IoT Leads to Expanding Risks

Moving Toward Solutions: Taking Stock

Chapter 13 Security-Driven Networking

The Cloud Has Changed Everything About Security

Last-Generation Security Solutions Are Inadequate

How Security Products Should Adapt

Future-Proofing: How CISOs Should Adapt

Protecting Data: What, Where, Who, and How

Steps to Security-Driven Networking

What Does the Best Security-Driven Network Look Like?

Chapter 14 Achieving End-to-End Security.

Yesterday's Solutions Don't Solve Today's Problems

Unified Threat Intelligence

Integrated Security Platforms Enable and Protect Digital Innovation

AI-Driven Security Operations

Adaptive Cloud Security

Glossary

Resources We Rely On

Index

EULA.

Notes:

Description based on print version record.

ISBN:

9781119854272

111985427X

9781119854333

1119854334

OCLC:

1267762159