Effective Security Leadership: New Times, New Role, New Skills

摘要

Not everyone in the security field aspires to be an information security officer. Many are content to continue the technical journey and build technical mastery of the discipline. Organizations would be very vulnerable without individuals with the deep skill sets needed to understand the details of information security across the multiple networks, computing platforms and software that businesses operate today. Over the past several years there has been a well-recognized need for the individual that can understand the business needs and direct the implementation of secure controls to support the business environment. The definition of the security officer's role will continue to develop as organizations face increasing regulations, consumer protection expectations and public awareness of organizations that have not paid adequate attention to security. Where will the security officer ultimately report? Will the scope encompass physical and information security under one roof? What will be the certification/educational requirements of the position? Will the next breed of security officers come from the business or information technology? What will be the average tenure of a security officer? Who knows? There is only one thing for sure... this is a very cool career path and a very, very cool job.