The Security Leader's Communication Playbook

Bridging the Gap Between Security and the Business
1. Auflage 2021
ISBN: 978-0-367-57001-9
Verlag: CRC Press

Buch, Englisch, 394 Seiten, Format (B × H): 156 mm x 234 mm, Gewicht: 730 g

Reihe: Security, Audit and Leadership Series

This book is for cybersecurity leaders across all industries and organizations. It is intended to bridge the gap between the data center and the board room. This book examines the multitude of communication challenges that CISOs are faced with every day and provides practical tools to identify your audience, tailor your message and master the art of communicating. Poor communication is one of the top reasons that CISOs fail in their roles. By taking the step to work on your communication and soft skills (the two go hand-in-hand), you will hopefully never join their ranks. This is not a “communication theory” book. It provides just enough practical skills and techniques for security leaders to get the job done. Learn fundamental communication skills and how to apply them to day-to-day challenges like communicating with your peers, your team, business leaders and the board of directors. Learn how to produce meaningful metrics and communicate before, during and after an incident. Regardless of your role in Tech, you will find something of value somewhere along the way in this book.

Zielgruppe

Academic, Postgraduate, and Professional Practice & Development

Autoren/Hrsg.

Brown, Jeffrey W

Fachgebiete

• Wirtschaftswissenschaften Betriebswirtschaft Management
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Wirtschaftswissenschaften Betriebswirtschaft Unternehmensfinanzen Controlling, Wirtschaftsprüfung, Revision
• Technische Wissenschaften Technik Allgemein Technische Zuverlässigkeit, Sicherheitstechnik
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit
• Mathematik | Informatik EDV | Informatik EDV & Informatik Allgemein
• Wirtschaftswissenschaften Betriebswirtschaft Unternehmenskommunikation

Inhaltsverzeichnis

Contents

Preface xvii

Acknowledgments xix

Author xxi

Introduction 1

Part 1 Communication Foundational Skills 13

1 Foundational Communication Skills 15

2 People Skills 43

3 The Language of Business Risk 59

4 Company Culture 79

5 Better Business Writing 93

6 Say What? Verbal Communication Skills 119

7 Communication Superpowers 157

Part 2 Communication in the Real World 183

8 Policies, Standards, Guidelines and Procedures 185

9 T raining and Awareness 203

10 Driving Change through Metrics 217

11 The High Stakes of Incident Response Communication 235

12 Communicating with Your Team and Colleagues 249

13 Managing Up: Finding Your Boss’s Communication Style 269

14 The Board of Directors 279

15 Working with Auditors 295

16 Your Next Job 305

17 Consultants and Sales: Building and Maintaining Client Relationships 325

Appendix 341

Index 361

Über Autor(innen)

Jeffrey Brown is a recognized information security and IT risk expert with a strong track record of more than two decades implementing cost-effective controls for global Fortune 500 financial institutions, including Citigroup, Goldman Sachs, GE Capital, BNY Mellon and AIG. He is currently serving as the first Chief Information Security Officer (CISO) for the State of Connecticut.
Jeff is active in the information security industry as a frequent speaker at various events and conferences and is the author of multiple articles and publications. He co-Chairs the Evanta New York CISO Executive Summit and works in an advisory capacity with various events, including the Cyber Investing Summit. He is a board advisor and mentor for iQ4 in their Virtual Cybersecurity Apprenticeship Challenge, which aims to prepare some 10,000 students for the workforce and help address the security skills shortage.
Jeff holds a B.A. in Journalism with an English minor and an M.S. in Publishing from Pace University. He holds multiple security certifications including CISSP-ISSMP, CISM and CRISC.