The information security threat landscape changes frequently as a result of changes in technologies, economic issues, globalization, social activism and hectavism, new political realities, and innovations by plain old criminals who want to steal data for financial benefits. Along with, the role and responsibilities of security professionals, especially the ones in the leadership roles, also change. Instead of playing a catch up game all the time, this book emphasizes focusing on basic principles and techniques. The information security leaders should implement these principles to update their personal knowledge, to safeguard their organization’s information assets and optimize information security cost.
Click HERE to download the PDF version of the book.
 |
Who are the target audience?
If you are an information security professional, whether in a leadership role or aspiring to be a future leader, this book is for you.
What is this book about?
The objective of this book is to make you successful as information security professional by learning from experience of great leaders in this field. It provides core fundamental models in a concise manner that are easy to read and use in managing information security. Most of the chapters accompany visual mind maps, action items, and other visual tools for easy understanding.
How is this book organized?
The book covers a set of carefully selected topics. This is to ensure that focus remains on principles that are the most important to the success of a security professional. The topics are arranged in six parts as listed below.
- Know The Business – List of topics important for understanding and knowing the business.
- Information Security Strategy – Elements of information security strategy, how to create strategy and put it into practice.
- Security Operations – Major areas related to running an effective security operations program.
- Risk Management – How to assess and manage risk.
- Personal Branding – Creating personal brand and establishing credibility to be effective as information security leader.
- Appendices – Miscellaneous data points and sources of information.
How to Use This Book?
I suggest that you read one chapter daily, take actions, set goals, and write those actions and goals on the “Goals and Activity Log” page at the end of each chapter. Next day, read another chapter and write the actions and goals with target dates. As you go along, start reading random chapters and keep on reviewing and updating your actions and goals to measure your progress and success.
A Systematic Way of Achieving Excellence
The book provides a systematic and measureable way towards excellence in your job. I have gone to great length to limit each topic to two pages or less. Please use the “Goals and Activity Log” page to record your progress and make the best use of your time. While you go along, record your experiences and share them on the book web site.
Subscribe to Blog for Release Dates and Updates
Please subscribe to this blog to keep yourself updated about the release date of the book. You can use “Follow Blog via Email” link on top-right corner of this page.
DISCLAIMER: All material presented is my own and not of my employer and does not constitute any recommendations, endorsements or professional consultation. The author is not liable for any direct or indirect loss to anyone or anything under any circumstances. Use it at your own discretion.
InfoSec Leaders Handbook 