Cyber Security Top Best Practices of Sucessful CISOs in 2021

In this episode of Life of a CISO, I review some of the common tips, tricks, tactics, and catchphrases that every world class CISO should know. Many CISOs think that they have to educate executives on the ins-and-outs of what they are doing to make the organization more secure against attacks. But in fact, the job of a CISO is to make the executives be able to focus on growing the business and think about security as little as possible. But at the same time, it is the CISO’s job to know the basics of the business they are in; specifically, they must know, off the top of their heads, what an organization is known for, what its competitive advantage is, and how it makes money. For example, McDonald’s doesn’t sell hamburgers, what they sell are hamburgers that are cheap and fast. CISOs, although they are not supposed to teach technical lessons on cybersecurity to executives, they must teach executives how to avoid scams and social engineering attacks. A common attack now is to send an email “warning” of a COVID outbreak, and use that to get the target. I recommend against telling executives what not to do, and instead tell them what to do. I hope you enjoy this episode of Life of a CISO