Description The technology landscape is changing fast; whether it is cloud computing, Zero Trust, AI, or the upcoming innovations of quantum computing. AI is already disrupting businesses and even everyday life. A successful security professional at any level of experience would need three key skills, namely functional acumen, business acumen, and communication skills. This book enables a foundational understanding of several concepts across technical domains like networking, identity, cloud computing, and threat intelligence, functional security concepts like risk management, and running security programs. This book also brings about the essential connection of security program to the overall organizational objectives. And lastly, how to manage talent, measure security objectives, and communicate the risks and outcomes effectively. By the end of this book, you will have the knowledge to appreciate the highly intertwined dimensions of security programs across people, process, and technology. This will prepare you to ensure that security objectives are directly aligned with your organization's business goals and to communicate that alignment effectively. Furthermore, you will gain several grounding concepts that are immediately useful for any practicing or aspiring CISO. What you will learn Foundational security principles, concepts, and their implementation. Risk management: frameworks, standards, and controls. Security of ports, protocols and services, cloud, and ZT. Understand IAM using RBAC, PAM, & SoD. Using threat intelligence to enrich CTEM, VM, and Incident Response. Drive security culture with human centric efforts. Managing talent with a competency framework. Design and implement a measurable and resilient security program for a successful business. Art of communication: from technical insights to boardroom. Who this book is for This book is ideal for current security leaders, CISOs, risk professionals, and aspiring cybersecurity professionals. Even business executives seeking to understand the strategic importance of cybersecurity would find the concepts easier to comprehend and apply. Table of Contents 1. The Triad of Security 2. About Managing Risks 3. Role of Standards and Controls 4. Role of Privacy Principles 5. Security and Privacy by Design 6. Key Security Technologies 7. Identity and Access Management 8. Cloud Security 9. Zero Trust 10. Threats and Exposure Management 11. Incident Response and Planning 12. Cyber Resilience 13. Human Centric Security 14. Managing Security Talent 15. Managing a Security Program 16. Business and Security Strategy 17. Effective Communication 18. Preparing For and Presenting to the Board
