Surabhi Sadasivan

Surabhi Sadasivan is a Certified Information Systems Security Professional (CISSP) and Senior Information Security Analyst with deep experience in security governance, risk management, and compliance across enterprise environments. Her professional background spans multiple domains of the CISSP framework, with particular expertise in building the governance foundations that allow organisations to manage security strategically rather than reactively.

The journey that produced this book was a personal one. Having experienced the distinctive challenge of the CISSP examination — the realisation that technical expertise alone is insufficient, and that a deliberate identity shift from analyst to security leader is required — she became committed to making that shift accessible to other professionals. The S.A.F.E. model, the 10 Golden Rules, and the preparation framework in this book are the direct product of that commitment.

Surabhi holds certifications in ISC2 CC and dual ISO Lead Auditor credentials alongside her CISSP, and has led successful certification programmes spanning ISO/IEC 27001, ISO/IEC 22301, HITRUST, SOC2, and Cyber Essentials+ across global delivery centres. She is a practitioner and a mentor who believes that the security profession is elevated not only by individuals earning certifications, but by those who carry the governance mindset those certifications represent into their daily professional decisions and organisational leadership.

She holds a Master of Computer Applications from SCMS School of Technology and Management, Cochin, and a Bachelor of Science in Computer Science from the University Institute of Technology, Kollam, both with First Class results. She is an active member of UWiSH (UST Women in Security & Hacking) and volunteers with the Kerala Police Cyberdome.