The CISO Playbook aims to provide nothing but real world advice and perspectives to both up and coming cybersecurity leaders as well existing ones looking to grow.

A CISO is the ultimate guardian of an organization's digital assets. As a cybersecurity leader ,a CISO must possess a unique balance of executive leadership, technical knowledge, strategic vision, and effective communication skills. The ever-evolving cyberthreat landscape demands a resilient, proactive approach coupled with a keen ability to anticipate attack angles and implement protective security mechanisms. Simultaneously, a cybersecurity leader must navigate the complexities of balancing security requirements with business objectives, fostering a culture of cybersecurity awareness, and ensuring compliance with regulatory frameworks.

The CISO Playbook aims to provide nothing but real-world advice and perspectives to both up-and-coming cybersecurity leaders as well as existing ones looking to grow. The book does not approach cybersecurity leadership from the perspective of the academic, or what it should be, but more from that which it really is. Moreover, it focuses on the many things a cybersecurity leader needs to "be" given that the role is dynamic and ever-evolving, requiring a high level of adaptability.

A CISO's career is touched from many differing angles, by many different people and roles. A healthy selection of these entities, from executive recruiters to salespeople to venture capitalists, is included to provide real-world value to the reader. To augment these, the book covers many areas that a cybersecurity leader needs to understand, from the pre-interview stage to the first quarter and from security operations to the softer skills such as storytelling and communications.

The book wraps up with a focus on techniques and knowledge areas, such as financial literacy, that are essential for a CISO to be effective. Other important areas, such as understanding the adversaries' mindset and self-preservation, are covered as well. A credo is provided as an example of the documented commitment a cybersecurity leader must make and remain true to.

Autorentext

Andres Andreu, the Deputy Chief Information Security Officer (CISO) at Hearst and a renowned cybersecurity leader, holds prestigious credentials including CISSP and ISSAP and is a Boardroom Certified Qualified Technology Expert (QTE). With a diverse career traversing federal government, corporate sectors, and entrepreneurial ventures in cybersecurity, he is a mentor, startup advisor, and an acclaimed author.

Inhalt

Foreword. Preface. About the Author. Special Contributors. Acknowledgments. 1. Be the Candidate. 2. Be a Student of the Business. 3. Be a Builder. 4. Be a Risk Manager. 5. Be an Operator. 6. Be a First Responder. 7. Be a Team Lead. 8. Be an Executive Leader. 9. Be a Governance, Risk, and Compliance (GRC) Advocate. 10. Be a Measurer. 11. Be a Communicator. 12. Be a Vendor Manager/Negotiator. 13. Be an Effective CISO. Index.