The following are resources that I believe will be of really great help while carrying out the CISO Role.
Books
- Building a Cyber Resilient Buiness This book was written with the CEO in mind. However it is a really good book to know the expectations of the CEO. This will make you a very important resource to your CEO. What fascinated me about this book is how non-technical it is. It provides an insight into the business side of Cyber Security in a very Simple manner and has questions at the end of each chapter that provide fantastic guide.
- CISO Handbook This handbook has been designed for the CISO who works in any of the United States Government Agencies. This blog will refer to content within this handbook and the references will be mentioned for quick reference.
Webinars
- Sans Cyber Security Webinars - Security leadership
- Life of a CISO Podcast
- CS2AI - If you are a CISO who is working within an environment that has Operational Technology then s definitely for you. At the heart of it are webinars that focus on Industrial Control Systems Cyber Security. I have to admit this is quite an Informational webinar, you should consider membership that will give you access to the entire library and the people as well and let me tell you they have quite the stories. One recommendation I would give is the webinar by Saltanant Mashirova: An Approach To Disaster Recovery in OT - She describes how to recover from an Incident in a very fascinating way that you have never imagine. This requires you to subscribe as a member though
- Mandiant Webinars This is a very good webinar. Recently they have been having a lot of advertising of their products in the webinar. However you can still checkout the older webinars, they are a treasure trove of information. The one I would recommend for you to try first is Developing Your Ransomware Playbook: Best Practices and Legal Considerations
- SANS Transformational Series
- SANS Operational Series
Websites
Whitepapers
- SANS - The Five ICS Cybersecurity Critical Controls
- Google Mandiant - The Defenders Advantage
- Central Bank of Kenya - Guidance on Cyber Security for the banking Sector
- Newyork state for Department for financial Services - Cyber Security Requirements for Financial Services Companies