Rational Cybersecurity for Business

What You Will Learn

• Improve your security culture: clarify security-related roles, communicate effectively to businesspeople, and hire, motivate, or retain outstanding security staff by creating a sense of efficacy
  
• Develop a consistent accountability model, information risk taxonomy, and risk management framework
• Adopt a security and risk governance model consistent with your business structure or culture, manage policy, and optimize security budgeting within the larger business unit and CIO organization IT spend
• Tailor a control baseline to your organization’s maturity level, regulatory requirements, scale, circumstances, and critical assets
• Help CIOs, Chief Digital Officers, and other executives to develop an IT strategy for curating cloud solutions and reducing shadow IT, building up DevSecOps and Disciplined Agile, and more
• Balance access control and accountability approaches, leverage modern digital identity standards to improve digital relationships, and provide data governance and privacy-enhancing capabilities
  
• Plan for cyber-resilience: work with the SOC, IT, business groups, and external sources to coordinate incident response and to recover from outages and come back stronger
• Integrate your learnings from this book into a quick-hitting rational cybersecurity success plan

Who This Book Is For

Chief Information Security Officers (CISOs)and other heads of security, security directors and managers, security architects and project leads, and other team members providing security leadership to your business