Tuesday, November 26, 2024

Tuesday Cyber Lacuna Slide (Shadow Leadership)

Cyber Lacuna Slide: Be wary of a culture that lets you lead from where you are. And is not able to acknowledge or see you lead from where you are at. Shadow leadership is enabled by the needs on which culture’s light is unable to shine. Scratch shadow leadership, I mean shadow IT. Shadow leadership is not shown to exist.

 

Posted by at No comments:

Tuesday, November 19, 2024

Tuesday Cyber Lacuna Slide (Credit Card Fraud)

Cyber Lacuna Slide: Congratulations! You have made your credit card brand unusable. No one is ever going to be able to make a purchase, authorized or fraudulent. You have won the credit card fraud game at the expense of your business needs. - Enabling the business while advocating for security works!

 

Posted by at No comments:

Tuesday, October 15, 2024

Tuesday Cyber Lacuna Slide (Sponsoring The CISO)

Cyber Lacuna Slide: Sponsoring the CISO - Before deciding what kind of CISO you need, know and understand how you are able and willing to sponsor your CISO within the business. Whether IT or business focused, the CISO will consider your expressed willingness to sponsor the role.

 

Posted by at No comments:

Wednesday, September 25, 2024

Tuesday Cyber Lacuna Slide (Make Breakfast) – Even if a day late.

Cyber Lacuna Slide: If culture eats strategy for breakfast, then make breakfast. Almost anything fed to the culture without enabling the culture and advocating for a feeling of material belonging to the strategy will likely not be appetizing to the culture. Remind those in the culture they belong. If you can't invite everyone to the table at least leave them a key to the strategy where they sit. Let them know how their work has, is, and will impact the strategy.

 

Posted by at No comments:

Tuesday, September 17, 2024

Tuesday Cyber Lacuna Slide (CISO Is Not a Checkbox Title)

Cyber Lacuna Slide: CISO is not a checkbox title. It is a position in the C-suite. The discussion is not where to place your CISO. The discussion is do you need a CISO. Many organizations need Director of Information Security, ISO, Head of Cybersecurity, etc. Not every organization needs a CISO in the C-suite.

 

Posted by at No comments:

Tuesday, September 3, 2024

Tuesday Cyber Lacuna Slide (Office of CISO Org Chart) – These articles are part of my work on a series of "Cyber Security Strategic Business Partner" articles.

A Need for the Cyber Security Strategic Business Partner: https://cxotechmagazine.com/a-need-for-the-cyber-security-strategic-business-partner/

A ChatGPT response to the article, A Need for the Cyber Security Strategic Business Partner: https://www.linkedin.com/pulse/chatgpt-response-article-need-cyber-security-strategic-david-stucky/

A Business Information Security Analyst Job Profile Within the Information Security Job Family: https://www.linkedin.com/pulse/business-information-security-analyst-job-profile-within-david-stucky/

Positioning the Cyber Security Strategic Partner within the Office of CISO: https://www.linkedin.com/pulse/positioning-cyber-security-strategic-partner-within-office-stucky-w21re/

Cyber Lacuna Slide: What happens when you re-imagine the Office of CISO aligned with Higher Education Strategic Initiatives rather than only aligning with Information Technology. Sample Organization Chart 1 Office of CISO -Principle CISO Academia - Deputy CISO 1 Administration - Deputy CISO/BISO 2 Research - Deputy CISO 3 Information Technology - Principle CISO Sample Organization Chart 2 Office of CISO - Principle CISO Business - Deputy CISO/BISO Academia - Strategic Partner 1 Administration - Strategic Partner 2 Research - Strategic Partner 3 Information Technology - Principle CISO


 

Posted by at No comments:

Tuesday, August 27, 2024

Tuesday Cyber Lacuna Slide - Summer Retreat (CISO as a Strategic Partner)

Cyber Lacuna Slide: The CISO needs to be accepted and expected to be a strategic business partner for the business. Too often business sees information security or cyber security as IT. This makes it even harder for business to see the value of having a partner to advocate for the security of the business processes for which they are responsible. If the CISO does not have a seat at the table, they need to make sure they have security staff embedded in the units at the functional level to enable business while advocating for security. The CISO needs liaisons, business information security analysts, cyber security strategic partners, or whatever you want to call them that understand lines of business. Security has not been just a technical IT issue for a long time.

 

Posted by at No comments:

Tuesday, August 20, 2024

Tuesday Cyber Lacuna Slide - Summer Retreat (Working with A CISO)

Cyber Lacuna Slide: Working with a CISO is not what you think. You are projecting from where you are at, what you know, and a shared cultivated vision for the business. If you needed to know, a CISO can enable business.

 

Posted by at No comments:

Tuesday, August 13, 2024

Tuesday Cyber Lacuna Slide - Summer Retreat (Define Process)

Cyber Lacuna Slide: Recognize the problem, Clarify intent, Understand customers, Define success, Evolve plan and communicate progress

 

Posted by at No comments:

Tuesday, August 6, 2024

These articles are part of my work on a series of "Cyber Security Strategic Business Partner" articles.

A Need for the Cyber Security Strategic Business Partner: https://cxotechmagazine.com/a-need-for-the-cyber-security-strategic-business-partner/

A ChatGPT response to the article, A Need for the Cyber Security Strategic Business Partner: https://www.linkedin.com/pulse/chatgpt-response-article-need-cyber-security-strategic-david-stucky/

A Business Information Security Analyst Job Profile Within the Information Security Job Family: https://www.linkedin.com/pulse/business-information-security-analyst-job-profile-within-david-stucky/

Positioning the Cyber Security Strategic Partner within the Office of CISO: https://www.linkedin.com/pulse/positioning-cyber-security-strategic-partner-within-office-stucky-w21re/
What happens when you re-imagine the Office of CISO aligned with Higher Education Strategic Initiatives rather than only aligning with Information Technology. Sample Organization Chart 1 Office of CISO -Principle CISO Academia - Deputy CISO 1 Administration - Deputy CISO/BISO 2 Research - Deputy CISO 3 Information Technology - Principle CISO Sample Organization Chart 2 Office of CISO - Principle CISO Business - Deputy CISO/BISO Academia - Strategic Partner 1 Administration - Strategic Partner 2 Research - Strategic Partner 3 Information Technology - Principle CISO


Posted by at No comments:

Tuesday Cyber Lacuna Slide - Summer Retreat (Seriously)

Tuesday Cyber Lacuna Slide - Summer Retreat (Seriously)

 

Posted by at No comments:

Tuesday, July 30, 2024

Tuesday Cyber Lacuna Slide - Summer Retreat (Information Security Organization)

Cyber Lacuna Slide: Information Security Organization, Organizational Leadership, Information Risk Management, Technology - Functional Structures and Lines of Business

 

Posted by at No comments:

Tuesday, July 9, 2024

Tuesday Cyber Lacuna Slide - Summer Retreat (Culture)

Cyber Lacuna Slide: Culture. Partnership. Community. Adapt and Grow. Learn.

 

Posted by at No comments:

Tuesday, June 25, 2024

Tuesday Cyber Lacuna Slide (Deserved Trust)

Cyber Lacuna Slide: Cyber Lacuna of Zero Trust Frameworks Trust Relationships/Boundaries With Partners Deserve Trust - “The highest form which civilization can reach is a seamless web of deserved trust. Not much procedure, just totally reliable people correctly trusting one another.” ∞ Charlie Munger

 

Posted by at No comments:

Tuesday, June 4, 2024

Tuesday Cyber Lacuna Slide (Sliced Bread)

Cyber Lacuna Slide: After the advent of the automation of sliced bread, it was discovered there was a staleness. Caused by gaps between the slices. It needed to be mitigated. Thus, the advent of the automated process to hold the slices closely in a tightly sealed wax paper. Closing the cyber lacuna. Sliced bread did not take our jobs. It changed how we worked.

 

Posted by at No comments:

Tuesday, May 21, 2024

Tuesday Cyber Lacuna Slide (Cybersecurity Leadership)

Cyber Lacuna Slide: Cybersecurity Leadership - People, Process, Technology - Often underutilized because they are under supported. How supported is your Data? Would you like to utilize your Data more effectively?

 

Posted by at No comments:

Tuesday, May 7, 2024

Tuesday Cyber Lacuna Slide (GenAI is a Tool)

Cyber Lacuna Slide: GenAI is a tool. People, skill, and experience are required to effectively use a tool. GenAI will make our jobs more effective. It will not make them easier, cheaper, or unnecessary.

 

Posted by at No comments:

Wednesday, April 17, 2024

Tuesday Cyber Lacuna Slide (Awareness Exists) – [Day Late Awareness]

 

Cyber Lacuna Slide: Information Security Awareness Did you talk with others today about your Information Security Program? For awareness to work others need to hear from you something is material and where to get more information. If you don’t talk with others about Information Security, is it material to them? How else would they know Information Security exists?

Posted by at No comments:

Tuesday, April 9, 2024

Tuesday Cyber Lacuna Slide (Getting Started in Cybersecurity)

Cyber Lacuna Slide: Why do “Getting Started in Cybersecurity” steps and lists leave out, “Understanding information flows of various lines of business.” People, Data, Process, Technology: Are these Getting Started guides overly focused on Technology with a dash of Process? Cybersecurity kind of needs to know the people and data to protect.

 

Posted by at No comments:

Tuesday, March 26, 2024

Tuesday Cyber Lacuna Slide (Quantification Is Not Really Hard)

Cyber Lacuna Slide: Quantification is not really hard. You overestimate the importance of perfect information. Measure what you understand, share, discuss, and accept. Then make decisive actions.

 

Posted by at No comments:

Tuesday, March 12, 2024

Tuesday Cyber Lacuna Slide (As You BISA)

Cyber Lacuna Slide: As Your Business Information Security Analyst: I should be on your leadership team. I do not need a vote. I need to be a trusted advisor.

 

Posted by at No comments:

Tuesday, March 5, 2024

Tuesday Cyber Lacuna Slide (Game the System)

 

Cyber Lacuna Slide: I should not have to game the system to be accepted at the table. I do not want to be part of a system that does not accept what I bring to the table. It never works.

Posted by at No comments:

Tuesday, February 20, 2024

Tuesday Cyber Lacuna Slide (IT and IS are Business Processes)

Cyber Lacuna Slide: IT and Information Security are two separate and distinct business processes. Information Security provides services to IT, HR, etc. Every business process in your organization can be as technical as IT. Information Security has to understand not just IT, but almost every other technical business process.

 

Posted by at No comments:

Tuesday, February 13, 2024

Tuesday Cyber Lacuna Slide (Information Security Is a Business Process)

Cyber Lacuna Slide: You must know how to balance your technical knowledge of risk with your business knowledge of risk. Class doors and open office spaces are an accepted business process. While doors and space are always an area of technical risk, that risk must be measured and considered as part of a business process.

 

Posted by at No comments:

Tuesday, February 6, 2024

Tuesday Cyber Lacuna Slide (Sponsorship, Strategy, Culture Part 2)

 

Cyber Lacuna Slide: Sponsorship is a leadership strategy either with or against culture. And yes, leadership has a not so easy balance to strike with culture.

Posted by at No comments:

Tuesday, January 30, 2024

Tuesday Cyber Lacuna Slide (Visible Information Security)

 

Cyber Lacuna Slide: I often wonder how visible is Information Security. When I listen to others, do I see it in their awareness? Do they see it as part of my identity, or is it hidden under other labels such as IT? If I do not make Information Security more visible, how can I believe in me and know I am where I am supposed to be. Security Awareness Tip: Use meetings to identify times your Business Information Security Analyst (BISA) is not present or engaged in your business process.

Posted by at No comments:

Friday, January 26, 2024

Do you need a BISA? You may need someone with similar experience as mine.

Minimize Surprise of Red Tape

A few months ago I wrote an article for CXOTechMagazine.com, A Need for the Cyber Security Strategic Business Partner.

 I have a supplementary article on LinkedIn.com,  A Business Information Security Analyst Job Profile Within the Information Security Job Family.

As well as an exploratory AI review of my article on LinkedIn.com, A ChatGPT response to the article, A Need for the Cyber Security Strategic Business Partner.

As a BISA, this is part of what I do. I understand systems and complexity. I help other's secure their people, data, processes, technology by following, leveraging, and enabling (minimizing) information security gaps, Cyber Lacuna. I want to understand.

Posted by at No comments:

Tuesday, January 23, 2024

Tuesday Cyber Lacuna Slide (Sponsorship, Strategy, Culture)

 Cyber Lacuna Slide: Sponsorship of any role can have a significant influence on the strategy of the company. A candidate should attempt to understand where their influence and culture's influence align. Understanding leadership's sponsorship of the role is key to understanding your ability to influence culture. Culture eats strategy for breakfast.


 

Posted by at No comments:

Tuesday, January 16, 2024

Tuesday Cyber Lacuna Slide (Your BISA Goes Here)

 Cyber Lacuna Slide: Security Awareness Tip: Use meetings to identify times your Business Information Security Analyst (BISA) is not present or engaged in your business process. Image: Your BISA goes here, Data, People, Process, Technology. Showing People follow process, People leverage Technology, Technology Enable Process. BISA helps understand and secure Follow, Leverage, and Enable.


Posted by at No comments:
Subscribe to: Posts (Atom)