Chief Information Security Officer - Training and Educational Resources

CISO Tradecraft

G Mark Hardy does interviews with security leaders. The show is produced by CISO Ross Young so the guests and topics are well vetted.

2 - Hacker Valley Studio

Ron Eddings and Chris Cochran talk shop with hackers and security leaders. Easy going conversational style to get in the head of security pros.

3 - Simply Cyber

👉🏼 Gerald Auger, Ph.D. puts out tons of great content including a daily news roundup.

4 - Haunted Hacker

Mike jones has some pretty deep conversations with hackers of all walks of life. Conversations range from the personal to deep technical.

5 - Dr. Dark Web

Chris Roberts gives us the unadulterated truth on all things cybersecurity. If you have heard Chris speak, you know what to expect.

Links to my favorite Security YouTube channels

(Add your favorite security YouTube channels in the comments so we can save this as a resource for later!)

𝟭. 𝗿𝗶𝘀𝗸𝟯𝘀𝗶𝘅𝘁𝘆 (https://lnkd.in/g8hCvu4t)

We do compliance overviews and deep dives on frameworks like SOC 2, ISO 27001, PCI DSS, and more. We also do weekly conversations with cybersecurity leaders.

𝟮. 𝗕𝗹𝗮𝗰𝗸 𝗛𝗶𝗹𝗹𝘀 𝗜𝗻𝗳𝗼𝗦𝗲𝗰 (https://lnkd.in/gK5NPW74)

BHIS have long hosted a wide variety of security and hacking related content on their YT channel.

𝟯. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗡𝗼𝘄 (https://lnkd.in/gvCVbCkK)

Weekly podcast covering security news and headlines.

𝟰. 𝗕𝗹𝗮𝗰𝗸 𝗛𝗮𝘁 (https://lnkd.in/gUa8yitF)

Many of the best presentations from the black hat conference and other related events.

𝟱. 𝗛𝟰𝘂𝗻𝘁𝟯𝗱 𝗛𝗮𝗰𝗸𝗲𝗿 (https://lnkd.in/gU2VdNCk)

Mike Jones hosts conversations with other individuals in the security community. These podcasts are very conversational and provide some insight to the humans behind the personalities.

𝟲. 𝗚𝗲𝗿𝗮𝗹𝗱 𝗔𝘂𝗴𝗲𝗿 - 𝗦𝗶𝗺𝗽𝗹𝘆 𝗖𝘆𝗯𝗲𝗿 (https://lnkd.in/gTKakihz)

Gerald uploads more GRC focused content including a daily news roundup.

𝟳. 𝗗𝗘𝗙𝗖𝗢𝗡 𝗖𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 (https://lnkd.in/ggc2HsaR)

Some of the presentations from the DEFCON Conference.

𝟴. 𝗢𝗪𝗔𝗦𝗣 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻 (https://lnkd.in/gEveFkz2)

Great presentations on technical topics typically related to application security.

𝟵. 𝗪𝗶𝗹𝗱 𝗪𝗲𝘀𝘁 𝗛𝗮𝗰𝗸𝗶𝗻 𝗙𝗲𝘀𝘁 (https://lnkd.in/gSd-Yt8B)

WWHF is a conference for the security community. They upload many of their best conference presentations that are worth watching.

𝟭𝟬. 𝗗𝗮𝘃𝗶𝗱 𝗕𝗼𝗺𝗯𝗮𝗹 (https://lnkd.in/girHS3VP)

David has almost 1M subscribers. He has long provided various I.T. related content, but recently he has been doing hacking deep dives.

𝟭𝟭. 𝗦𝗔𝗡𝗦 𝗜𝗻𝘁𝗲𝗿𝗻𝗲𝘁 𝗦𝘁𝗼𝗿𝗺 𝗣𝗼𝗱𝗰𝗮𝘀𝘁 (https://lnkd.in/g8B3-b5d)

Daily 5 minute podcast covering breaking news in cybersecurity.

Links to free business skills for security professionals

(Add your favorite links in the comments so we can save this as a resource for later!)

𝟭 - 𝗛𝗼𝘄 𝘁𝗼 𝗪𝗿𝗶𝘁𝗲 𝗮 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗖𝗮𝘀𝗲 𝗳𝗼𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 (https://lnkd.in/e-7UYh7P)

To get what you need as a security organization, you need to be able to effectively ask for it. This is a format that will help you make asks from the executive team.

𝟮 - 𝗛𝗼𝘄 𝘁𝗼 𝗪𝗿𝗶𝘁𝗲 𝗘𝗳𝗳𝗲𝗰𝘁𝗶𝘃𝗲𝗹𝘆 - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗼𝗳 𝗖𝗵𝗶𝗰𝗮𝗴𝗼 𝗟𝗲𝗰𝘁𝘂𝗿𝗲 (https://lnkd.in/gTupZ6Cc)

This is a YouTube video on writing effectively that I always share with our team here at risk3sixty. It is especially helpful for business writing.

𝟯. 𝗛𝗼𝘄 𝘁𝗼 𝗗𝗼 𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 𝗕𝘂𝗱𝗴𝗲𝘁 (https://lnkd.in/gi8BTZHb)

Security leaders need to be able to make accurate budgets. This helps ensure you can communicate your needs to the finance team and get what you need to support the business.

𝟰. 𝗛𝗼𝘄 𝘁𝗼 𝗦𝗽𝗲𝗮𝗸 𝗘𝗳𝗳𝗲𝗰𝘁𝗶𝘃𝗲𝗹𝘆 - 𝗠𝗜𝗧 𝗟𝗲𝗰𝘁𝘂𝗿𝗲 (https://lnkd.in/grvmjxdg)

I revisit this YouTube video often. If you are giving a presentation this is great food for thought.

𝟱. 𝗛𝗼𝘄 𝘁𝗼 𝗦𝘁𝗮𝗿𝘁 𝗮 𝗦𝗽𝗲𝗲𝗰𝗵 (https://lnkd.in/geJFKRyh)

Launching into a presentation is the hardest part for me. This is a format to help get things kicked-off.

𝟲. 𝗔 𝗙𝗼𝗿𝗺𝗮𝘁 𝗳𝗼𝗿 𝗘𝗳𝗳𝗲𝗰𝘁𝗶𝘃𝗲 𝗠𝗲𝗲𝘁𝗶𝗻𝗴𝘀 (https://lnkd.in/eBci5-Uu)

Meetings have the habit of getting off track. Our team has been using this format for internal meetings and it works very well.

𝟳. 𝗨𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱 𝗬𝗼𝘂𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗦𝘁𝘆𝗹𝗲 (https://lnkd.in/efKYihcc)

This is an e-book that helps security leaders think through their leadership tendencies. It also provides tools for building a team and assessing your organization's needs based on your own strengths and weaknesses.

Add your favorite links in the comments so we can save this as a resource for later!

#cybersecurity #leadership #business

𝗟𝗶𝗻𝗸𝘀 to 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴 𝗮𝗻𝗱 𝗧𝗼𝗼𝗹𝘀

If you are looking to build your security leadership skills, here are a bunch of resources.

𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗦𝗸𝗶𝗹𝗹𝘀:

𝟭. 𝗖𝗜𝗦𝗢 𝗘𝘃𝗼𝗹𝘂𝘁𝗶𝗼𝗻 𝗕𝗼𝗼𝗸 (https://lnkd.in/e-Adx4qv)

This is a great book on security leadership and the necessary communication and business skills written by security pros Matthew Sharp and Kyriakos "Rock" Lambros.

𝟮. 𝗧𝗵𝗲 𝗖𝗜𝗦𝗢 𝗥𝗼𝗹𝗲 𝗕𝗹𝗼𝗴 𝗦𝗲𝗿𝗶𝗲𝘀 - 𝗙𝗥𝗘𝗘 (https://lnkd.in/eAywKxhF)

This is a five part blog and webinar series that I wrote on security leadership skills. Goes through CISO roles, org chart design, recruiting and managing teams.

𝟯. 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗖𝗜𝗦𝗢 𝗪𝗼𝗿𝗸𝘀𝗵𝗼𝗽 𝗦𝗲𝗿𝗶𝗲𝘀 - 𝗙𝗥𝗘𝗘 (https://lnkd.in/eJk3UFsH)

This is a free (no registration) series on CISO topics ranging from Management to Information Protection.

𝟰. 𝗦𝗔𝗡𝗦 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀 (https://lnkd.in/ei8K8gcN)

This is a 5 day (in person) or 30 hours (online) course that is a crash course in being a security manager. This is a great once over the world from the SANS Institute.

𝟱. 𝗦𝗶𝗺𝗽𝗹𝘆 𝗖𝘆𝗯𝗲𝗿 𝗚𝗥𝗖 𝗖𝗼𝘂𝗿𝘀𝗲 - 𝗙𝗥𝗘𝗘 & 𝗣𝗔𝗜𝗗 (https://lnkd.in/eY2kPwR8)

👉🏼 Gerald Auger, Ph.D. Auger, Ph.D. developed a solid "pay what you can" GRC course for anyone looking to break into the GRC side of cybersecur

𝗕𝘂𝗶𝗹𝗱 𝗮 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗖𝗮𝘀𝗲 𝗮𝗻𝗱 𝗔𝘀𝗸 𝗳𝗼𝗿 𝗕𝘂𝗱𝗴𝗲𝘁:

𝟲. 𝗚𝘂𝗶𝗱𝗲 𝘁𝗼 𝗕𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗖𝗮𝘀𝗲 - 𝗙𝗥𝗘𝗘 (Blog: https://lnkd.in/e-7UYh7P or on YouTube: https://lnkd.in/ebjZf_Aq )

Free guide and template that I put together on thinking through and documenting a business case for security initiatives

𝗚𝗲𝗻𝗲𝗿𝗮𝗹 𝗟𝗲𝗮𝗱𝗲𝗿𝘀𝗵𝗶𝗽 𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴:

𝟲. 𝗥𝗼𝗯 𝗖𝗮𝗺𝗽𝗯𝗲𝗹𝗹 - 𝗙𝗥𝗘𝗘 & 𝗣𝗔𝗜𝗗 (https://lnkd.in/e-ieDTsH)

We get leadership training from Rob Campbell at risk3sixty. Subscribe to Rob's blog. Its free.

𝟳. 𝗗𝗮𝗻 𝗦𝘂𝗹𝗹𝗶𝘃𝗮𝗻 𝗦𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰 𝗖𝗼𝗮𝗰𝗵 - 𝗙𝗥𝗘𝗘 & 𝗣𝗔𝗜𝗗 (https://lnkd.in/eaqbj24X)

Dan Sullivan has a widely praised leadership ecosystem. He is the business coach of business coaches. Tons of free content on YouTube.

𝟴. 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗪𝗿𝗶𝘁𝗶𝗻𝗴 𝟭𝟬𝟭 - 𝗙𝗥𝗘𝗘 (https://lnkd.in/ewSFvvtq)

Fantastic course from the University of Chicago I find myself revisiting often.

#leadership #business #cybersecurity

https://www.cybersecuritytribe.com/articles/top-11-books-for-cisos-to-read-today

𝟭. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 𝗠𝗮𝘁𝘂𝗿𝗶𝘁𝘆 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲 𝗶𝗻 𝗘𝘅𝗰𝗲𝗹 (https://lnkd.in/gjeTQCcZ)

We created an easy to follow excel checklist security leaders can use to assess their program gaps. The workbook includes a nice dashboard based you can use in presentations.

𝟮. 𝗠𝗮𝘁𝘂𝗿𝗶𝘁𝘆 𝗔𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗣𝗿𝗲𝘀𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲 𝗶𝗻 𝗣𝗼𝘄𝗲𝗿𝗣𝗼𝗶𝗻𝘁 (https://lnkd.in/guKtNZBN)

This presentation is a great template for presenting the result of your security program maturity assessment to executives or the board of directors.

𝟯. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 𝗕𝘂𝗱𝗴𝗲𝘁 𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲 𝗶𝗻 𝗘𝘅𝗰𝗲𝗹 (https://lnkd.in/gnZsxJbz)

This is a comprehensive security program budget broken down by categories and potential tools you might need. It also includes a nice dashboard to show how your budget is broken down.

𝟰. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 𝗥𝗢𝗜 𝗖𝗮𝗹𝗰𝘂𝗹𝗮𝘁𝗼𝗿 𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲 𝗶𝗻 𝗘𝘅𝗰𝗲𝗹 (https://lnkd.in/gxevXDcb)

This is an ROI calculator can use it as a conceptual model for any topic you wish. This is great for communicating ROI to the executive team or board of directors.

𝟱. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗖𝗮𝘀𝗲 𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲 𝗶𝗻 𝗣𝗼𝘄𝗲𝗿𝗣𝗼𝗶𝗻𝘁 (https://lnkd.in/guKtNZBN)

This is a great template to communicate a business case when you are requesting resources or project initiatives from the executive team.

𝟲. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 𝗢𝗿𝗴 𝗖𝗵𝗮𝗿𝘁 𝗶𝗻 𝗘𝘅𝗰𝗲𝗹 (https://lnkd.in/gHK9g_Gm)

This RACI diagram is an excellent tool for assessing if your organization has the right roles assigned to the right people.

𝟳. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗲𝗮𝗺 𝗢𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻 𝗦𝘆𝘀𝘁𝗲𝗺 𝗪𝗼𝗿𝗸𝗯𝗼𝗼𝗸 (https://lnkd.in/g6MVVF49)

The Security Team Operating System is a system for leaders to run their team. It includes a guide on how to define purpose, establish values, assign roles, create rhythms of meetings and data sharing, and set goals..

𝟴. 𝟱 𝗖𝗜𝗦𝗢 𝗔𝗿𝗰𝗵𝗲𝘁𝘆𝗽𝗲𝘀 (https://lnkd.in/guH3vi8q)

This guide breaks down the 5 types and gives you a helpful assessment to consider how different CISO strengths fit at different types of organizations. Also includes a self assessment.

𝟵. 𝗖𝗜𝗦𝗢 𝗙𝗶𝗿𝘀𝘁 𝟵𝟬 𝗗𝗮𝘆𝘀 𝗖𝗵𝗲𝗰𝗸𝗹𝗶𝘀𝘁 𝗮𝗻𝗱 𝗧𝗲𝗺𝗽𝗹𝗮𝘁𝗲𝘀 (https://lnkd.in/gYHVeFaN)

This guide includes everything you need for your first 90 days on the job as a security leader.

ashbyca/security-leadership-training.md