Program Architecture : Fight the Good Fight (Security, Audit and Leadership Series)

Business executives consider what is necessary to protect the company. It comes down to people, process and technology, organized within an information security program. Everything has its place within the program, including business processes, assets and the right blend of controls to protect them. This book describes program architecture, the discipline of designing, implementing and leading information security programs. • Prove Yourself Ready Now • Team Development and Retention • Program Maturity • Influence Support and Funding • Cyber Threat Intelligence • Third Party Risk Management • Metrics and Reporting • Insider Risk Monitoring and Response • Threat Landscape and Controls Analysis • Conduct an Assessment • Crisis Communications • Control by Governance This book provides practical advice in the areas of cybersecurity and operational risk management. The goal is to provide readers with practical advice they can use upon return to work. Chapter abstracts: Chapter 1 Prove yourself ready now This chapter provides practical advice to prove yourself 'ready now' for a cybersecurity management role. The journey begins with a view from the executive’s side of the table and how to speak in terms of risk. There is an overview of risk management, with tips for influencing risk mitigation. Focus transitions to how a communications plan can make you more effective as a leader. There is practical advice for developing presentation skills with limited stress and anxiety through a four-step approach. With that skill in-place you can communicate program statuses to executives. Professional development and C-Level presentation round out the chapter. Chapter 2 Team development and retention This chapter provides leaders with practical advice for developing employees in their current role, with tips to help them move laterally or to pursue promotion to management. The focus shifts to management routines throughout a calendar year, including performance and development plans, c