Ciso Evolution - Business Knowledge for Cybersecurity Executives

Praise for THE CISO EVOLUTION "As the former CISO of a Fortune 10 company, and later helping take a startup to Unicorn status, I can say this is a must-read for anyone in cybersecurity. The content is refreshing and applicable from the SOC analyst to the seasoned cybersecurity leadership team. We all need to understand how our work connects to business value. The prescriptive approach and techniques revealed in the detailed MBA-style case studies offer insights that you will not find in any other cybersecurity book that exists. Congrats to Matt and Rock for helping bond cybersecurity to business in a more intimate way than ever before! Go buy this book." -Malcolm Harkins, Chief Security and Trust Officer, Epiphany Systems; former CISO, Intel and Cylance "If you are a CISO or someone working to become one, and want to uplevel your executive communications skills and truly gain insights into running security risks like business, read this book. This is the first book that gives true examples that can help you actually see what others only talk about at the high level. Matt and Rock have done a great job sharing the intimate stories that have helped shape their great careers." Dave Hannigan, Director, Product Security Assurance, Google Cloud "This is a book that our industry has needed for a long time. Security skills and a fundamental understanding of modern technology is important. One could argue that for a CISO, it's equally important - perhaps even more important - to understand how the business runs. To protect the value created by an organization, we must understand how that value is created in the first place. Thank you Matthew and Rock. Every security leader can benefit by reading this book." -Caroline Wong, Chief Strategy Officer, Cobalt.io "Transitioning from cybersecurity operator to investor and board member has reinforced for me that success in the CISO role is only available to those that can blend technical expertise, with business savvy. The CISO Evolution provides a timeless reference that combines predictive theories with compelling personal stories to convey a direct path to success. Those that skip this manuscript do so at their own peril. The competitive advantage this book provides makes it intellectual bedrock for future generations of cybersecurity leadership." Jay Leek, Managing Partner and Co-founder of SYN Ventures, Board Director and former CISO "One of the biggest blind spots for many CISOs today is understanding security's role in the broader business framework of their company. Matt Sharp and Rock Lambros are experienced CISOs who walk the walk and have laid out very clearly how CISOs can become more influential in their company by understanding the fundamental executive leadership skills necessary for success. This book should have a place on every CISO's bookshelf." -Mark Weatherford, Chief Security Officer at the National Cybersecurity Center and former Deputy Undersecretary for Cybersecurity at the U.S. Department of Homeland Security "The array of technical disciplines in security make it endlessly complex. This reality can be overwhelming for the new CISO, taking focus away from the business and its pursuit of opportunity. The CISO Evolution aims to solve that. It's the mini-MBA we all need - but likely never had. I am honored to endorse Matt and Rock's goals for the new (and not so new) CISO. They aim to give CISOs the tools we need so we can rightly take a seat at the executive (business) table." -Richard Seiersen, CISO; author of The Metrics Manifesto and How To Measure Anything In Cybersecurity Risk

List of contents

Foreword ix
Preface xi
Acknowledgments xv
Introduction 1
Part I Foundational Business Knowledge 7
Chapter 1 Financial Principles 9
Chapter 2 Business Strategy Tools 29
Chapter 3 Business Decisions 55
Chapter 4 Value Creation 91
Chapter 5 Articulating the Business Case 129
Part II Communication and Education 167
Chapter 6 Cybersecurity: A Concern of the Business, Not Just IT 169
Chapter 7 Translating Cyber Risk into Business Risk 197
Chapter 8 Communication - You Do It Every Day (or Do You?) 239
Part III Cybersecurity Leadership 273
Chapter 9 Relationship Management 275
Chapter 10 Recruiting and Leading High Performing Teams 307
Chapter 11 Managing Human Capital 339
Chapter 12 Negotiation 367
Conclusion 383
Index 385

About the author

MATTHEW K. SHARP is Chief Information Security Officer of Logicworks. He is responsible for security governance, risk management, strategy, and architecture in a business that provides comprehensive cloud services to help customers successfully onboard and operate complex and compliant workloads on the AWS and Azure public clouds.
KYRIAKOS "ROCK" LAMBROS is CEO and Founder of RockCyber, a cybersecurity strategy consulting firm focused on helping firms align cybersecurity to their enterprise business goals. He has extensive experience building security programs and overseeing security architecture, operations, threat intelligence, governance, and risk management.

Summary

Learn to effectively deliver business aligned cybersecurity outcomes

In The CISO Evolution: Business Knowledge for Cybersecurity Executives, information security experts Matthew K. Sharp and Kyriakos "Rock" Lambros deliver an insightful and practical resource to help cybersecurity professionals develop the skills they need to effectively communicate with senior management and boards. They assert business aligned cybersecurity is crucial and demonstrate how business acumen is being put into action to deliver meaningful business outcomes.

The authors use illustrative stories to show professionals how to establish an executive presence and avoid the most common pitfalls experienced by technology experts when speaking and presenting to executives. The book will show you how to:
* Inspire trust in senior business leaders by properly aligning and setting expectations around risk appetite and capital allocation
* Properly characterize the indispensable role of cybersecurity in your company's overall strategic plan
* Acquire the necessary funding and resources for your company's cybersecurity program and avoid the stress and anxiety that comes with underfunding

Perfect for security and risk professionals, IT auditors, and risk managers looking for effective strategies to communicate cybersecurity concepts and ideas to business professionals without a background in technology. The CISO Evolution is also a must-read resource for business executives, managers, and leaders hoping to improve the quality of dialogue with their cybersecurity leaders.

Product details

• Authors: Kyriakos Lambros, M Sharp, Matthew Sharp, Matthew K Sharp, Matthew K. Sharp, Matthew K. Lambros Sharp
• Publisher: Wiley, John and Sons Ltd
• Languages: English
• Product format: Hardback
• Released: 31.01.2022
• EAN: 9781119782483
• ISBN: 978-1-119-78248-3
• No. of pages: 416
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > IT; Social sciences, law, business > Business > Business administration; Computersicherheit, Informatik, computer science, Business & management, Computer Security & Cryptography, Computersicherheit u. Kryptographie, Wirtschaft u. Management, Risiko-, Notfall- u. Krisenmanagement, Risk, Contingency & Crisis Management