Category Archives: InfoSec

Using SWOT Analysis to Create InfoSec Strategy

SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis is an industry standard way of analyzing current situation (marketing, business strategy, risk assessment, etc). In many cases, SWOT analysis provides foundation for creating business strategy. Following is a short description of how we … Continue reading →

Posted in InfoSec, Leadership | Tagged , , | Comments Off on Using SWOT Analysis to Create InfoSec Strategy

The Bare Minimum Business Terminology Every InfoSec Professional Must Know

The role of CISO, and other InfoSec professionals, has morphed into a critical business function. One should expect getting involved in “business” discussion often, and at higher levels. Understanding and speaking business language is more important than ever for success … Continue reading →

View post to subscribe to site newsletter.

Posted in InfoSec, Leadership | Tagged , | Comments Off on The Bare Minimum Business Terminology Every InfoSec Professional Must Know

What it really takes to stand up a SOC

IDC (and other analysts) predict information security, threat intelligence, data analytics, hunting, among others, are expected to grow and become more important part of a CISO’s strategy in 2015 and beyond. If one has money and backing of a large organization, … Continue reading →

Posted in InfoSec, Leadership | Tagged , , , | Comments Off on What it really takes to stand up a SOC

Latest Update to CISO Responsibilities Mind Map

CISO Responsibility is changing over time. This is the latest release of my CISO MindMap to show the complex role of a CISO’s life.   PDF Versions are available at the following URLs: US Letter Size Image US Legal Size … Continue reading →

Posted in cisomindmap, InfoSec, Leadership | Comments Off on Latest Update to CISO Responsibilities Mind Map