How to Cheat at Managing Information Security

Chapter 1

The Security Organization

The purpose of this chapter is to:

■ Review typical positions of the information security function and the benefits of each

■ Define the role of the security function

■ Discuss the qualities of a good CISO

Anecdote

To be a chief information security officer (CISO), you must demonstrate certain key qualities to an employer. At the interview for my last position, I sat down, miscalculating the touch-down so the arm of the chair slid neatly into my pants pocket with a ripping sound. My Top-Shelf consultancy suite was now complete with air-conditioning.

I immediately announced, “I’ve ripped my trousers”—so my interviewers would know the exact source of the sound that had so obviously come from my seat. Then I said, “Now ...