#59 - CISO Knowledge Domains Part 1

One of the most common questions that we get asked on CISO Tradecraft is what do I need to learn to be a good CISO?  After a lot of reflection, CISO Tradecraft has put together a Top 10 List of CISO knowledge domains that we believe are the core skills which produce really good CISOs.  This episode will go over just the first 5 knowledge areas with the remaining five on a future episode.

1. Product Security focuses on ensuring developers write secure code
2. Defensive Technologies focuses on creating multiple layers of defenses in an organization to protect against a multitude of attacks
3. Detection & Response Capabilities is about creating mechanisms to identify how attackers might circumvent your organization’s defensive technologies
4. Laws, Regulations, & Oversight is about ensuring compliance with appropriate laws and regulations
5. Enabling Technologies is about enabling businesses to create digital transformation

https://github.com/cisotradecraft/podcast