The Information Systems Security Officer's Guide, 3rd Edition

Introduction

Section I provided a basic understanding of the external world, with all its many threats to information and information systems—all of which have a direct bearing on the cyber security officer and his or her job. Section II provides a more internal, business focus on the world of the cyber security officer.

Section II begins with the identification of the position, duties, and responsibilities of the corporation cyber security officer. It progresses through a discussion of:

• establishing and managing a cyber security program;

• strategic, tactical, and annual plans;

• developing and managing a cyber security organization and its functions;

• measuring cyber security costs, failures, and successes through metrics management;

• supporting ...