The CISO Perspective: Understand the importance of the CISO in the cyber threat landscape

by Barry Kouns, Jake Kouns

Overview

In this updated edition, the security threat landscape has widened and the challenge for CISOs to be more than just security coordinators has become a mandate for organizational survival. This book challenges and guides information security professionals to think about information security and risk management from the enterprise level, and not just from the IT perspective.

Read this book and understand how:

• The CISO’s role can improve an organization’s cyber strategy.
• An enterprise’s view of information security, business continuity, compliance, safety, and physical security is crucial for the success of your organisation’s cyber security defense.
• Soft skills are crucial in order for the CISO to communicate effectively with the Board and other departments in the organisation.
• Standards such as ISO 27001:2022 can help your organisation implement a suitable ISMS (information security management system).
• Risk management is imperative to identify, analyze, evaluate and protect the organization’s assets.

Product Details

ISBN-13:	9781787784468
Publisher:	IT Governance Publishing
Publication date:	10/17/2023
Sold by:	Barnes & Noble
Format:	eBook
Pages:	78
File size:	1 MB

About the Author

Barry Kouns is a security and risk management expert with over 25 years of experience in information security consulting, risk assessment and quality management. He formed and operates SQM Advisors, LLC an information security, risk assessment and IT service management firm that has led numerous organizations to ISO/IEC 27001:2013 certification. Mr. Kouns co-founded Risk Based Security, Inc., a vulnerability intelligence and data breach analytics company, that was acquired by Flash Point in 2022.

Jake Kouns holds a Master of Business Administration with a concentration in information security from James Madison University. He holds a number of certifications including CISSP, CISM®, CISA®, and CGEIT®. Jake co-founded Risk Based Security, Inc., and is currently the Chief Innovation Officer at Flashpoint. He is well known from his presentations at security conferences including RSA, CISO Executive Summit, EntNet IEEE GLOBECOM, CanSecWest, and SyScan. Jake is also the co-founder of RVAsec, a Richmond, Virginia information security conference that has grown to host more than 500 attendees. He is the co-author of Information Technology Risk Management in Enterprise Environments and has also been interviewed numerous times as an expert in the security industry.

Barry Kouns is a security and risk management expert with over 25 years of experience in information security consulting, risk assessment and quality management. Barry formed and operates SQM-Advisors, an information security, risk assessment and IT service management firm that has led eight organisations to ISO/IEC 27001:2005 certification. He is frequently quoted in magazines and news articles on information security and has held the position of Trainer for the British Standards Institute (BSI). He holds a BS in Statistics and an MS in Industrial Engineering Management. Barry has earned the CISSP designation and is a trained ISO/IEC/27001 Lead Auditor and ISMS Implementer, and is ITIL Foundation certified.

Jake Kouns has an MBA with a concentration in Information Security from James Madison University. He holds a number of certifications including CISSP, CISM, CISA and CGEIT. He is currently Director of Cyber Security and Technology Risks Underwriting for Markel Corporation, a specialty insurance company. He has presented at many well-known security conferences including RSA, CISO Executive Summit, EntNet IEEE GlobeCom, CanSecWest, and SyScan. He is the co-author of Information Technology Risk Management in Enterprise Environments, and has also been interviewed numerous times as an expert in the security industry. Jake is the co-founder, CEO, and CFO of the Open Security Foundation (OSF), a non-profit organisation that oversees the operations of the Open Source Vulnerbility Database (OSVDB.org) and DataLossDB.

Table of Contents

Introduction
Chapter 1: The nature of the CISO role
Chapter 2: The traditional CISO job description
Chapter 3: The changing CISO role
Chapter 4: The new CISO’s toolbox
Chapter 5: Risk management
Chapter 6: The information security management system
Chapter 7: CISO Survival
Chapter 8: Summary – You become what you think about
Further reading