CISO Evolution : Business Knowledge for Cybersecurity Executives

Learn to effectively deliver business aligned cybersecurity outcomes  

In The CISO Evolution: Business Knowledge for Cybersecurity Executives, information security experts Matthew K. Sharp and Kyriakos “Rock” Lambros deliver an insightful and practical resource to help cybersecurity professionals develop the skills they need to effectively communicate with senior management and boards. They assert business aligned cybersecurity is crucial and demonstrate how business acumen is being put into action to deliver meaningful business outcomes. 

The authors use illustrative stories to show professionals how to establish an executive presence and avoid the most common pitfalls experienced by technology experts when speaking and presenting to executives. The book will show you how to: 

• Inspire trust in senior business leaders by properly aligning and setting expectations around risk appetite and capital allocation 
• Properly characterize the indispensable role of cybersecurity in your company’s overall strategic plan 
• Acquire the necessary funding and resources for your company’s cybersecurity program and avoid the stress and anxiety that comes with underfunding 

Perfect for security and risk professionals, IT auditors, and risk managers looking for effective strategies to communicate cybersecurity concepts and ideas to business professionals without a background in technology.  The CISO Evolution is also a must-read resource for business executives, managers, and leaders hoping to improve the quality of dialogue with their cybersecurity leaders. 

MATTHEW K. SHARP is Chief Information Security Officer of Logicworks. He is responsible for security governance, risk management, strategy, and architecture in a business that provides comprehensive cloud services to help customers successfully onboard and operate complex and compliant workloads on the AWS and Azure public clouds.

KYRIAKOS “ROCK” LAMBROS is CEO and Founder of RockCyber, a cybersecurity strategy consulting firm focused on helping firms align cybersecurity to their enterprise business goals. He has extensive experience building security programs and overseeing security architecture, operations, threat intelligence, governance, and risk management.