Security Leader’s Communication Playbook Bridging the Gap between Security and the Business
Produktdetaljer
Om bidragsyterne
Jeffrey Brown is a recognized information security and IT risk expert with a strong track record of more than two decades implementing cost-effective controls for global Fortune 500 financial institutions, including Citigroup, Goldman Sachs, GE Capital, BNY Mellon and AIG. He is currently serving as the first Chief Information Security Officer (CISO) for the State of Connecticut.
Jeff is active in the information security industry as a frequent speaker at various events and conferences and is the author of multiple articles and publications. He co-Chairs the Evanta New York CISO Executive Summit and works in an advisory capacity with various events, including the Cyber Investing Summit. He is a board advisor and mentor for iQ4 in their Virtual Cybersecurity Apprenticeship Challenge, which aims to prepare some 10,000 students for the workforce and help address the security skills shortage.
Jeff holds a B.A. in Journalism with an English minor and an M.S. in Publishing from Pace University. He holds multiple security certifications including CISSP-ISSMP, CISM and CRISC.
<p><strong>Foreword for <i>The Security Leader’s Communication Playbook</i> by Jeffrey W. Brown</strong></p><p>The CISO role has evolved so rapidly in Fortune-class organizations -- from a siloed technologist to now a C-Suite leader who advises on the confluence of infosec, risk and business initiatives. Jeff Brown is among a small cohort of security leaders who have been at the forefront of this evolution. </p><p>Jeff has led security teams in Fortune 500 financial services firms and now as the first CISO for the State of Connecticut. He’s brought that experience to this book and mixed it with his humanities training – he was a journalism major before he went into infosec – to offer an invaluable perspective on how CISOs must communicate to be effective.</p><p>Communication isn’t a CISO ‘nice-to-have’ -- it’s now an essential skill. One meeting, they need to help a sales regional head understand and own risk around customer data collection processes. The next meeting, they’re briefing the board on the risk associated with a new acquisition and presenting a mitigation roadmap. CISOs must be influencers across levels of the business. Communications skills drive influential interactions.</p><p>In this book, Jeff taps into his experience and skillset to provide clear, actionable guidance on the communication skills CISOs need to connect with the business. This hands-on guide doesn’t talk abstractly about how to communicate, but instead speaks directly to CISOs’ needs and is an essential part of any CISO’s library. </p>
<p><strong>Foreword for <i>The Security Leader’s Communication Playbook</i> by Jeffrey W. Brown</strong></p><p>The CISO role has evolved so rapidly in Fortune-class organizations -- from a siloed technologist to now a C-Suite leader who advises on the confluence of infosec, risk and business initiatives. Jeff Brown is among a small cohort of security leaders who have been at the forefront of this evolution.</p><p>Jeff has led security teams in Fortune 500 financial services firms and now as the first CISO for the State of Connecticut. He’s brought that experience to this book and mixed it with his humanities training – he was a journalism major before he went into infosec – to offer an invaluable perspective on how CISOs must communicate to be effective.</p><p>Communication isn’t a CISO ‘nice-to-have’ -- it’s now an essential skill. One meeting, they need to help a sales regional head understand and own risk around customer data collection processes. The next meeting, they’re briefing the board on the risk associated with a new acquisition and presenting a mitigation roadmap. CISOs must be influencers across levels of the business. Communications skills drive influential interactions.</p><p>In this book, Jeff taps into his experience and skillset to provide clear, actionable guidance on the communication skills CISOs need to connect with the business. This hands-on guide doesn’t talk abstractly about how to communicate, but instead speaks directly to CISOs’ needs and is an essential part of any CISO’s library.</p><p>"I remember having a conversation with a friend about my desire to become a security architect. He told me, "Be wary; the security realm is politically charged and full of less competent people. Everywhere he had worked had derogatory opinions on the security departments and architects." As I read this book, I couldn't help but wish that all security practitioners had access to this informative guide. Having worked in various security organizations, I have witnessed the success and failure of the security function. The common factor that distinguishes these scenarios is how well the security leadership and teams comprehend and align their work with the business objectives. This book is a valuable manual for every security practitioner who seeks to bring value to their organization. Personally, I will hold this book close to my heart as I progress in my career."</p><p><b>-- John Kuforiji PMP</b></p>
Produktdetaljer
Om bidragsyterne
Jeffrey Brown is a recognized information security and IT risk expert with a strong track record of more than two decades implementing cost-effective controls for global Fortune 500 financial institutions, including Citigroup, Goldman Sachs, GE Capital, BNY Mellon and AIG. He is currently serving as the first Chief Information Security Officer (CISO) for the State of Connecticut.
Jeff is active in the information security industry as a frequent speaker at various events and conferences and is the author of multiple articles and publications. He co-Chairs the Evanta New York CISO Executive Summit and works in an advisory capacity with various events, including the Cyber Investing Summit. He is a board advisor and mentor for iQ4 in their Virtual Cybersecurity Apprenticeship Challenge, which aims to prepare some 10,000 students for the workforce and help address the security skills shortage.
Jeff holds a B.A. in Journalism with an English minor and an M.S. in Publishing from Pace University. He holds multiple security certifications including CISSP-ISSMP, CISM and CRISC.