One of the most common questions that we get asked on CISO Tradecraft is what do I need to learn to be a good CISO? After a lot of reflection, CISO Tradecraft has put together a Top 10 List of CISO knowledge domains that we believe are the core skills which produce really good CISOs. This episode will go over just the first 5 knowledge areas with the remaining five on a future episode.
- Product Security focuses on ensuring developers write secure code
- Defensive Technologies focuses on creating multiple layers of defenses in an organization to protect against a multitude of attacks
- Detection & Response Capabilities is about creating mechanisms to identify how attackers might circumvent your organization’s defensive technologies
- Laws, Regulations, & Oversight is about ensuring compliance with appropriate laws and regulations
- Enabling Technologies is about enabling businesses to create digital transformation
https://github.com/cisotradecraft/podcast