The CISO Playbook

Andres Andreu

$231

Hardback

Forthcoming
Pre-Order now

QTY:

English

CRC Press
01 November 2024

Coding theory & cryptology; Privacy & data protection; Computer fraud & hacking; Data encryption; Network management

Series: Security, Audit and Leadership Series

A CISO is the ultimate guardian of an organization's digital assets. As a cybersecurity leader ,a CISO must possess a unique balance of executive leadership, technical knowledge, strategic vision, and effective communication skills. The ever-evolving cyberthreat landscape demands a resilient, proactive approach coupled with a keen ability to anticipate attack angles and implement protective security mechanisms. Simultaneously, a cybersecurity leader must navigate the complexities of balancing security requirements with business objectives, fostering a culture of cybersecurity awareness, and ensuring compliance with regulatory frameworks.

The CISO Playbook aims to provide nothing but real-world advice and perspectives to both up-and-coming cybersecurity leaders as well as existing ones looking to grow. The book does not approach cybersecurity leadership from the perspective of the academic, or what it should be, but more from that which it really is. Moreover, it focuses on the many things a cybersecurity leader needs to “be” given that the role is dynamic and ever-evolving, requiring a high level of adaptability.

A CISO's career is touched from many differing angles, by many different people and roles. A healthy selection of these entities, from executive recruiters to salespeople to venture capitalists, is included to provide real-world value to the reader. To augment these, the book covers many areas that a cybersecurity leader needs to understand, from the pre-interview stage to the first quarter and from security operations to the softer skills such as storytelling and communications.

The book wraps up with a focus on techniques and knowledge areas, such as financial literacy, that are essential for a CISO to be effective. Other important areas, such as understanding the adversaries' mindset and self-preservation, are covered as well. A credo is provided as an example of the documented commitment a cybersecurity leader must make and remain true to.

By: Andres Andreu
Imprint: CRC Press
Country of Publication: United Kingdom
Dimensions: Height: 234mm, Width: 156mm,
Weight: 700g
ISBN: 9781032757964
ISBN 10: 1032757965
Series: Security, Audit and Leadership Series
Pages: 266
Publication Date: 01 November 2024
Audience: Professional and scholarly , Undergraduate
Format: Hardback
Publisher's Status: Forthcoming

Foreword. Preface. About the Author. Special Contributors. Acknowledgements. 1. Be the Candidate. 2. Be a Student of the Business. 3. Be a Builder. 4. Be a Risk Manager. 5. Be an Operator. 6. Be a First Responder. 7. Be a Team Lead. 8. Be an Executive Leader. 9. Be a Governance, Risk, & Compliance (GRC) Advocate. 10. Be a Measurer. 11. Be a Communicator. 12. Be a Vendor Manager / Negotiator. 13. Be an Effective CISO. Index.

Andres Andreu, the Deputy Chief Information Security Officer (CISO) at Hearst and a renowned cybersecurity leader, holds prestigious credentials including CISSP and ISSAP and is a Boardroom Certified Qualified Technology Expert (QTE). With a diverse career traversing federal government, corporate sectors, and entrepreneurial ventures in cybersecurity, he is a mentor, startup advisor, and an acclaimed author.

Reviews for The CISO Playbook

"""The CISO Playbook,"" by Andres Andreu, is a must-read for any aspiring or current Chief Information Security Officer (CISO) aiming to elevate their strategic impact within an organization. Andres expertly delves into the multifaceted roles a CISO can fill in business today. Particularly commendable is the book’s focus on being a student of the business — articulating a vision for proactive cybersecurity measures that align seamlessly with an organization’s corporate goals. As mentioned, the second standout feature of this guide is its in-depth exploration of the different roles a CISO can have, and I found I identified with many of them throughout my career. The author highlights how CISOs can transform cybersecurity from a technical necessity to a strategic asset, thereby enhancing their stature and influence within the company. This narrative is not just informative but also serves as a compelling blueprint for CISOs to enhance their influence and leadership in any corporate landscape. Gary Hayslip, Global CISO - SoftBank Investment Advisers This is the book that every aspiring CISO wishes they had when they first embarked on their path to earn the CISO title. In this book “The CISO Playbook”, Andres provides a roadmap for the aspiring CISO to evaluate an organization, craft plans and strategies, establish organizational alignment, identify key risks, orient to the culture, and build and operate a well-structured security program. Going well beyond the basics, Andres provides a framework for becoming an inspiring security leader who sets a clear vision and mission and empowers people to grow and shine in their areas of expertise. In a business climate that is often volatile, uncertain, complex, and ambiguous, Andres provides practical insight, wisdom, and guidance in a way that only a seasoned CISO, who has been there and done that, can do. This book is a treasure trove for the aspiring or established CISO who wants to take their game to the next level. Alfredo Hickman, CISO - Obsidian Security"