New Security Leadership: The Basics
Maintaining the right level of boardroom and employee security awareness is a consequence of leadership. And more effective ideas and tactics are replacing the old, reactive security leadership paradigm. CSO looks at what's Out and what's In.
By Derek Slater
Further Reading
Selected leadership profiles from CSO Magazine:
Undercover
Want to hear about security leadership straight from the source? Read the latest Undercover, a monthly column written by an anonymous CSO.
Security 2.0
What does it take to bring together information security and physical security? One secret is to sneak up on it, the way Constellation Energy did, by seeming to be doing something else entirely. Read more about how John Petruzzi, director of enterprise security, is leading the transformation.
Secrets of Their Success
It takes more than knowledge and experience to excel. Five top CSOs share their tips for putting forward a positive messagein appearance, word and deed. Hear from American Electric Powers Michael Assante, the Bank of Americas Rhonda MacLean and others.
Goal-Line Stand
Anything can happen at a football game. But Milton Ahlerich, the NFLs VP of security, has sworn to make it safe for players and fans alike.
Safe Harbor
From Boston's Logan Airport to the city's waterfront shipping facilities, CSO Dennis Treece patrols an anxious perimeter.
Called to Account
Some security executives see protecting their company's assets as a way to earn a living. ABN Amro's CISO Sharon O'Bryan sees it as her mission.
The Architect
Imagine being able to layer security into your building the way you do the plumbing or wiring. Genzyme's Dave Kent doesn't have to imagine it-he got to do it.
It's a Small World
Bob Littlejohn heads up Avon's worldwide effort to keep the business up and running and the employees safe.
The Human Touch
GWU's information security officer Krizi Trivisani focuses on the softer skills-like communicating with students and administrators-to help her battle real-life villains.
Read more about data protection in CSOonline's Data Protection section.
Other stories by Derek Slater
The challenge of true data protection spans databases, internal and external networks, physical and offsite storage, business partners and more. These resources offer expert perspective from the basics through specific key elements of data protection strategies.
Network security basics
Protection, detection, and reaction—those are the three underlying principles your security program must embody
Computer incident detection, response, forensics
Richard Bejtlich shows how to measure and improve the maturity of your incident response
A few good IT security metrics
Stop counting blocked malware attachments and measure things that can contribute to meaningful change
5 key cloud security trends
Cloud security is evolving rapidly—stay on top of it
IT risk assessment frameworks
How to do end-to-end encryption
How to compare and use enterprise antivirus
Also find sample data protection policies in CSO's tools, templates and policies library
- The CISO's Survival Guide to Securing Data
- Data Privacy and Protection in Production Environments: New Research from Ponemon Institute
- FireEye Advanced Threat Protection KnowledgeVault
- Five Tips to Consider in a Data Security Strategy for Smartphones and Tablets
- Moving Your Email to the Trusted Cloud
- Comprehensive Server Protection
- DHS cybersecurity official leaves more questions than answers
During lunch at ISSA-LA's Security Summit IV event here at the Universal City Hilton, we heard a talk from - Maiffret: If it's a Linux flaw, your phone is directly threatened
- Alan Paller on cutting through the bull
More Salted Hash with Bill Brenner
