Security Management Strategies for the CIOAccess "On the Job"
This article is part of the February 2005 issue of 12 security lessons for CISOs they don't teach you in security school
DISPATCHES 12 lessons they don't teach you in security school about being a CISO You may trust your perception of how businesses operate and what your role as a CISO is in making them safe, but nothing can really prepare you for the reality of when you walk into that office for the first time. CISOs shouldn't focus on the latest and greatest technology, but on getting things done enterprise-wide and incrementally improving the security. Every task, objective and operation needs to be vetted by stakeholders, working groups or committees. To top it off, the constant calls from vendors (each with a silver-bullet solution to all your problems) don't aid the process. When I assumed the CISO post at JPMorgan Chase after 12 years of consulting, I had many preconceived notions about how things worked and what needed to be done. Suffice it to say that most of my assumptions were thrown out the window before the first week was out. So, how should you maximize your time as a CISO? It's not something they teach you in security or business school. After a year on the job... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
Secure Reads: The Network Security Bible
A review of the Network Security Bible by Eric Cole, Ronald Krutz and James W. Conley
-
Desktop Security: Senforce Portable Firewall Plus
Senforce's Senforce Portable Firewall Plus
-
Wireless security product review: AirTight Networks' SpectraGuard 2.0
A review of AirTight Networks' SpectraGuard 2.0
-
Database Security: Ingrian i211 DataSecure Platform
Ingrian Networks' Ingrian i211 DataSecure Platform
-
In MSSPs We Trust
Regulatory and cost-cutting pressures are forcing enterprises to reexamine the value of managed security services.
-
On the Job
12 lessons they don't teach you in security school about being a CISO.
-
Secure Reads: The Network Security Bible
-
-
Recent Releases: Security product briefs, February 2005
Learn about the security products launched in February 2005.
-
IronPort C-Series Messaging Gateway: Antivirus, Antispam tool
Enhance your email security strategy with IronPort's C-Series Messaging Gateway. In this product review you will get information on cost, installation, reporting, configuration, and antivirus and antispam technology.
-
Hot Pick: Funk Software's Odyssey Client 3.03 and Odyssey Server 2.01
Funk Software's Odyssey Client 3.03 and Odyssey Server 2.01
-
SSHv2: Safe & Secure
The overhauled encryption protocol helps harden networks.
-
Security: Measuring Up
by Pete Lindstrom, Contributor
Metrics are the key to measuring security. Learn how to gather data and calculate the answers you need.
-
Recent Releases: Security product briefs, February 2005
-
Columns
-
Logoff: The battle against spyware
Spywary
-
On the Radar
Firewall Redundancy?
-
Perspectives: Symantec, Veritas pairing to change security
Symantec's merger with Veritas will change security managers' lives.
-
Editor's Desk: Nessus charges for signature updates
No Free Lunches
-
Logoff: The battle against spyware
More Premium Content Accessible For Free
Next-generation firewalls play by new rules
E-Zine
Firewalls started their journey to the next generation at about the same time as the Star Trek TV series. While the products have advanced with ...
Developing your endpoint security management transition plan
E-Handbook
This TechGuide will help you develop your endpoint security management transition plan. Articles focus on overcoming the challenges of Web-based ...
Unlock new pathways to network security architecture
E-Zine
Network security architecture is showing its age at many organizations. With new technology, different data types, and use of multi-generations of ...