Category: Volumes

  • How to CISO Volume 0: The Idealized CISO Job Description

    How to CISO Volume 0: The Idealized CISO Job Description

    Many companies are not in dire need of a CISO right now, but need to define a role for their future CISO, often including a plan to develop the incumbent security executive into a credible CISO. This guide provides a profile of the idealized CISO. Why idealized, and not ideal? Because a CISO is often…

  • Preview: How to CISO Volume 2: Risk Measurement

    Preview: How to CISO Volume 2: Risk Measurement

    As a CISO, you’re often going to be asked to measure risk. This has a lot of different meanings, depending on who is speaking, so you’re going to have to listen carefully to the speaker to understand what they’re actually asking for. It’s possible that you’re being asked to provide a quantitative answer to the…

  • How to CISO Volume 1: The First 91 Days

    How to CISO Volume 1: The First 91 Days

    Ninety days is generally the grace period (or “honeymoon,” if you’d like) that a new executive has to get acclimated to a new environment. At the end of this time window, your employer is going to expect you to be executing on a plan, anyone you need to meet will expect you to have already…