Question

1. What is the role of the CISO in an organization? 2. What types of knowledge, skills, abilities are most important for a successful CISO to have? 3. How can a CISO contribute to making security a priority during the system development life cycle (SDLC)?

Answer 1

2)

A chief information security officer often referred as CISO is the senior-level executive within an organization, which is responsible for establishing and maintaining the enterprise vision, strategy and program to ensure information asserts and technologies are adequately protected. Some of the roles are as follows: -Information Technology security and information assurance inclusive of the integrity, availability and confidentiality of the information. - Information Technology and Business process risk management such as supply chain management, financial systems and so on. Authentication, identity and access management]

In order to work with in CISO the employee must have the knowledge on following areas. Having knowledge on Cyber security such as integrity, availability and confidentiality of information Having knowledge on management of IT security systems and applications such as MSSP, SIEP, VMS, LMS, 2FA and so on - - Having knowledge on IT investigations, digital forensics and eDiscovery. " Having knowledge on security and business continuity and disaster recovery planning.