Security Basics

In-depth looks at the basics of information security, physical and corporate security, business continuity, and more.

By Derek Slater

Security Leadership

Critical concepts and tactics for leading a security department or function.

Enterprise Risk Management: Get started in six steps
Daunted by the ambition of ERM? Here's a six-step exercise to start ERM without revamping any org charts or busting the budget. NEW

What is a Chief Security Officer?
A sample job description for security leadership and operational risk management.
Also read about the role of the CSO as a business enabler in What is a CSO part 2.

The new basics of security leadership
Maintaining the right level of boardroom and employee security awareness is a consequence of leadership. And more effective ideas and tactics are replacing the old, reactive security leadership paradigm.

Security and business: communication 101
Understanding business language and priorities, and translating security-speak into effective communication with other executives

Security and business: financial metrics 101
From ALE to ROSI—the evolving science of quantifying security's payoff

Physical and IT security convergence: the basics
The benefits and challenges of holistic security management

Information security management basics
How to take a multi-faceted approach to information security management that incorporates organizational, managerial and operational aspects that are closely associated with the business.
by Micki Krause, et al

The CISO's shift from network security to risk management
How the CISO role has evolved over the past several years.

How to build an effective security awareness program
Awareness programs are the cheapest way to prevent costly problems, but the security message can be easy to ignore. CSOs and CISOs share their strategies for spreading the good word.

More in-depth leadership reading:

Security Case Studies
Real-world looks at security in action.

The Security Metrics Collection
A roundup of security metrics coverage, including both operational and financial metrics.

Templates, tools, and policies:

Also see our resource center with sample security policies and tools.

Read more about data protection in CSOonline's Data Protection section.

Other stories by Derek Slater

• Print