Michael Krausz's guest appearances

Michael Krausz

The IT Governance Podcast

CISO Tradecraft®

Owen Smith

Ashley Madison

Jimmy Wales

Thomas Cook

Dixons Carphone

Brian Honan

Christopher Wright

Tom Mooney

Alan Calder

Tony Drewitt

Stewart Bertram

OwlTail

In the US we often focus on SOC-2, NIST Special Pubs, and the Cybersecurity Framework. In Europe (and most of the rest of the world), ISO 27001 is the primary standard. ISO concerns itself with policy, practice, and proof, whereas NIST often shows the method to follow. Michael points out that a CISO is responsible for governance, (internal) consulting, and audit. In early stages of growing a security function, a CISO needs to be technically-focused, but as a security department matures, the CISO must be organizationally-focused. Also, to effectively grow your team, first determine what actions need to take place, how much effort it requires, and how often it needs to take place. Then, build an action sheet and collect data for three months. Finally, take that to your executives and document your requirements for more staff. Michael Krausz LinkedIn Profile: https://www.linkedin.com/in/michael-krausz-b55862/ Michael Krausz Website: https://i-s-c.co.at/ Full Transcript: https://docs.google.com/document/d/13fghym7IWyPvuRANQXUvmv-ulkSj93xv  Chapters 00:00 Introduction 04:01 Is there a Gap Analysis in ISO 27001? 08:05 Is there a Requirement for ISO Standards? 10:57 What is ISO 27001? 13:11 Is there a Parallel Development between the US and EU? 16:57 Do you want to be a trooper? 21:17 What's the Oldest Operating System? 23:09 Is there a Legacy Operating Systems that you can't get away with? 24:11 The Most Important Class for a CISO 26:33 The Secrets of a Successful CISO 29:30 CISO - I need 6 people period 33:40 What's the Primary Skill Needed in a CISO? 37:41 How to Maximize the Number of FTEs

In the US we often focus on SOC-2, NIST Special Pubs, and the Cybersecurity Framework. In Europe (and most of the rest of the world), ISO 27001 is the primary standard. ISO concerns itself with policy, practice, and proof, whereas NIST often shows the method to follow. Michael points out that a CISO is responsible for governance, (internal) consulting, and audit. In early stages of growing a security function, a CISO needs to be technically-focused, but as a security department matures, the CISO must be organizationally-focused. Also, to effectively grow your team, first determine what actions need to take place, how much effort it requires, and how often it needs to take place. Then, build an action sheet and collect data for three months. Finally, take that to your executives and document your requirements for more staff. Michael Krausz LinkedIn Profile: <a href="https://www.linkedin.com/in/michael-krausz-b55862/" rel="nofollow" target="_blank">https://www.linkedin.com/in/michael-krausz-b55862/</a> Michael Krausz Website: <a href="https://i-s-c.co.at/" rel="nofollow" target="_blank">https://i-s-c.co.at/</a> Full Transcript: <a href="https://docs.google.com/document/d/13fghym7IWyPvuRANQXUvmv-ulkSj93xv" rel="nofollow" target="_blank">https://docs.google.com/document/d/13fghym7IWyPvuRANQXUvmv-ulkSj93xv</a> Chapters <ul><li>00:00 Introduction</li> <li>04:01 Is there a Gap Analysis in ISO 27001?</li> <li>08:05 Is there a Requirement for ISO Standards?</li> <li>10:57 What is ISO 27001?</li> <li>13:11 Is there a Parallel Development between the US and EU?</li> <li>16:57 Do you want to be a trooper?</li> <li>21:17 What's the Oldest Operating System?</li> <li>23:09 Is there a Legacy Operating Systems that you can't get away with?</li> <li>24:11 The Most Important Class for a CISO</li> <li>26:33 The Secrets of a Successful CISO</li> <li>29:30 CISO - I need 6 people period</li> <li>33:40 What's the Primary Skill Needed in a CISO?</li> <li>37:41 How to Maximize the Number of FTEs</li></ul>

#116 - A European view of CISO responsibilities (with Michael Krausz)

Michael Krausz, author of 'Managing Information Security Breaches - Studies from real life', sits down with us and talks about his book. Buy this book here: https://www.itgovernance.co.uk/shop/product/managing-information-security-breaches-studies-from-real-life-2nd-edition

Michael Krausz, author of 'Managing Information Security Breaches - Studies from real life', sits down with us and talks about his book. Buy this book here: <a href="https://www.itgovernance.co.uk/shop/product/managing-information-security-breaches-studies-from-real-life-2nd-edition" rel="nofollow" target="_blank">https://www.itgovernance.co.uk/shop/product/managing-information-security-breaches-studies-from-real-life-2nd-edition</a>

Author podcast: Managing Information Security Breaches, with Michael Krausz