Chapter 9: Congratulations! You Are Hired

In the previous chapters, we discussed the various roles that the Chief Information Security Officer (CISO) plays in an organization. Some of these roles are traditional information security roles – roles that have been evolving over time. While in the past, the security team was largely considered just part of the information technology team, the CISO and their team have increasingly gained influence regarding the management aspects of their respective organizations. They now have a bigger role to play in the company and are involved in both short-term and long-term strategic decision-making processes.

In this chapter, we will discuss the practical aspects of the duties of the CISO, assuming that you have now been hired as a CISO in a medium-sized institution to take charge of security matters. This chapter will show the practical application of what we have learned regarding the duties of the CISO in an organization. We will cover...