Leading a Cyber-Security Program: A Guide for Information Security Professionals

Catapulted to the forefront of business operations, the sudden importance of information security has seen many people forced into becoming their organization's security expert - thrust into a new job with unclear and undefined functions

This book describes the roles and functions of IS professionals, focusing as much on management as on technology, and including sections on how to manage two distinctly different info-sec environments: 9-to-5 business and 24/7 business. Broad-ranging in focus, it covers both day-to-day operations and long-term strategy from roles, responsibilities, policies and procedures, to risk assessment and incident handling.