Book Image

Building a Cyber Resilient Business

By : Dr. Magda Lilia Chelly, Shamane Tan, Hai Tran
Book Image

Building a Cyber Resilient Business

By: Dr. Magda Lilia Chelly, Shamane Tan, Hai Tran

Overview of this book

With cyberattacks on the rise, it has become essential for C-suite executives and board members to step up and collectively recognize cyber risk as a top priority business risk. However, non-cyber executives find it challenging to understand their role in increasing the business’s cyber resilience due to its complex nature and the lack of a clear return on investment. This book demystifies the perception that cybersecurity is a technical problem, drawing parallels between the key responsibilities of the C-suite roles to line up with the mission of the Chief Information Security Officer (CISO). The book equips you with all you need to know about cyber risks to run the business effectively. Each chapter provides a holistic overview of the dynamic priorities of the C-suite (from the CFO to the CIO, COO, CRO, and so on), and unpacks how cybersecurity must be embedded in every business function. The book also contains self-assessment questions, which are a helpful tool in evaluating any major cybersecurity initiatives and/or investment required. With this book, you’ll have a deeper appreciation of the various ways all executives can contribute to the organization’s cyber program, in close collaboration with the CISO and the security team, and achieve a cyber-resilient, profitable, and sustainable business.
Table of Contents (14 chapters)

The CTO and Security by Design

The Chief Technology Officer (CTO) is an executive who handles an organization’s technical requirements and research and development (R&D). The CTO often reports directly to the Chief Information Officer (CIO) but in some organizations may report to the Chief Executive Officer (CEO). The CTO is also responsible for overseeing technology development for the company’s customers, and may handle internal IT operations for smaller companies that have no CIO.

When working with your CTOs, it helps to understand their priorities, potential conflicts of interest with the Chief Information Security Officer (CISO), and the importance of security by design and secure coding for the CTO’s role in cybersecurity.

We will cover the following topics in this chapter:

  • The role of the CTO
  • Why the CTO should care about cybersecurity
  • How the CTO becomes a security ally
  • Secure coding and secure software development
  • Conflicts...