دانلود کتاب با آتش با آتش مبارزه کنید – استراتژی‌های امنیت سایبری پیشگیرانه برای رهبران امروزی

DIGITAL TRANSFORMATION AND THE EVER-CHANGING THREAT landscape have significantly altered the role of chief information security officers (CISOs) and security decision-makers. Traditional CISO responsibilities such as patch management and incident response are as critical as ever, but today’s CISOs must also concern themselves with supply chain risks, myriad privacy regulations, and 5G. In addition to fighting traditional and emerging threats, CISOs also face the stress of the skills gap: not having enough people to do the job. These challenges interwoven with network security are forcing CISOs to take a more holistic approach to balancing risk, security, and strategic business enablement. Technology is not the only approach to solving the quagmire of security challenges we face. Security leaders must address people, processes, and technology, synthesizing them to create security solutions that manage risk while advancing business objectives at the speed of today’s economy. As CISOs, we must become fluent in the language of the business. We must influence others to change their mindsets, habits, and approaches to technology and behave in ways that maintain security. We need a cultural shift that enables everyone to adopt effective, ongoing processes to keep our organizations safe. Security must be embedded into vendor selection, employee onboarding, and product development. Security awareness training must be continuous to match the cadence of the threats we face. We need security leaders who understand the value of the latest technology, but even more importantly who have the skills to develop relationships that bring people together and the discipline to create repeatable processes. Today’s security leaders face considerable stress. The CISO role has a high turnover rate, with an average tenure of just twenty-six months. Fundamental changes are needed to empower us to lead effectively, attain a better worklife balance, and manage the inevitable stress of our roles. The answer is not working longer hours; 95% of CISOs are working an average of ten hours more a week than their contracts stipulate.1 We need shortcuts to success, like learning from mentors and peers. The challenge, of course, is finding the time for that learning. That’s why my colleagues and I wrote this book: to share our knowledge and, more importantly, our experience, something that you will not find in a textbook or on a certification exam. We have come together to share our perspectives as security leaders from across industries and sectors, offering our best thinking as well as sharing important lessons learned. Harnessing this insight and utilizing the strategies in this book can help leaders and organizations improve their culture and security posture. With the ongoing evolution in security challenges and the pressing need for a cultural shift, this book identifies steps that we as leaders need to be thinking about. This book is for anyone working in cybersecurity and IT leadership who seeks a better grasp of the continually changing nature of security threats and who is interested in effective approaches to address them. We also hope this book will inspire a more diverse group of people to consider a career in cybersecurity leadership. As we discuss in Chapter 5, there are both a skills gap and a diversity gap to fill in the world of cybersecurity. By the time you finish this book, you will be evolving into a next-generation CISO. You will better understand how to adopt best practices and processes to encourage your people to make effective, safe use of technology. You will know how to serve as a business strategist, helping your organization reframe security as a business enabler. You will also learn how to improve security 24/7, up and down your supply chain, from the edge to the cloud, and from frontline workers up to your board. Finally, you will gain strategies to attract and promote the next generation of diverse talent.