Why CISOs Fail The Missing Link in Security Management--and How to Fix It

This book serves as an introduction into the world of security and provides insight into why and how current security management practices fail, resulting in overall dissatisfaction by practitioners and lack of success in the corporate environment. The author examines the reasons and suggests how to fix them. The resulting improvement is highly beneficial to any corporation that chooses to pursue this approach or strategy and from a bottom-line and business operations perspective, not just in technical operations. This book transforms the understanding of the role of the CISO, the selection process for a CISO, and the financial impact that security plays in any organization.

Why? 1. The Dismal Discipline 2. The Business of Being CISO 3. Let It Rain 4. Don’t Call Me Sue 5. Comply Oh My 6. Techs-Mechs 7. The CISO, Reimagined Index

Barak has over 25 years of experience in technology, operations, and business management, including over 15 years of information security management experience. Barak came up with the concept of "virtual CISO" - an outsourced, fully managed security suite for companies that wish to implement a security program and mature it over time, at an early stage of developing his consulting practice, and it has become the cornerstone of its service offerings. In this capacity, he has successfully created, developed, grown and run several security organizations as CISO in multiple companies across different industries, and developed his reputation as a nationally recognized security compliance subject matter expert, visionary, and leader. He has spoken frequently in conferences, private industry events, and other venues, authored, both under his own name and as a ghost writer, multiple trade articles, was quoted by media sources, had appearances on local and national TV, wrote the compliance section of a highly respected book on technology operations management, and participated in a number of respected forums, such as a US representative in a state dept hosted conference on global cybercrime. Has was also part of the Israeli team that assisted US authorities in apprehending the late 90s notorious hacker, the Analyzer.