Dr. Mansur Hasib - #InfoGov17 - Information Governance & Cybersecurity Leadership = Business Success Strategy

•

1 like•147 views

Modern organizations are powered by information and technology. The most important element however are people. Proper information governance and cybersecurity require the implementation of an appropriate culture. This session explains why people are important and how culture is developed in any organization.

Business

CYBERSECURITY LEADERSHIP
Dr. Mansur Hasib, CISSP, PMP, CPHIMS
Program Chair, Cybersecurity Technology
The Graduate School
University of Maryland University College (UMUC)
“We are working on 93,000 dreams, what is yours?”
www.cybersecurityleadership.com
Winner of #InfoGov Expert of the Year 2017
Winner of People’s Choice Award in Cybersecurity 2017
Finalist (ISC)2 Americas ISLA Awards 2017

SESSION GOALS
• Understand Cybersecurity Leadership
• Understand Why People Are Important
• Understand How to Develop Culture
www.cybersecurityleadership.com

CYBERSECURITY DEFINITION DERIVED FROM MODEL
Cybersecurity is the mission focused and risk optimized
governance of information, which maximizes
confidentiality, integrity, and availability using a
balanced mix of people, policy, and technology while
perennially improving over time.
-Mansur Hasib (2017)
www.cybersecurityleadership.com

CYBERSECURITY LEADERSHIP AND GOVERNANCE
Cybersecurity leadership is governance of people to
achieve cybersecurity culture and perpetual innovation
in an organization.
-Mansur Hasib (2016)
www.cybersecurityleadership.com

WHAT CAN CYBERSECURITY LEADERSHIP ACHIEVE?
• More Brains at Work=Better Cybersecurity and Governance
• Appropriate Technology, Analysis, and Decisions
• Implementation of Micro Innovation Culture
• Continuous Improvement=Better Cybersecurity
• Teamwork=Productivity
• Happier Workforce
• Less Churn=Better Retention of Intellectual Capital
• Better Loyalty=Better Cybersecurity
www.cybersecurityleadership.com

GOVERNANCE AND ORGANIZATIONAL CULTURE
• Shared Values
• Rituals
• Heroes
• Social Network Preventing Deviations
www.cybersecurityleadership.com
Note: Adapted from Corriss, L. (2010) and others
Culture Determines Behavior

• Cybersecurity is People Powered Perpetual Innovation
• Governance is Leadership, Not Control
• Cybersecurity is Not a One Brain Sport
THANKS – SPREAD THE WORD – GIVE FEEDBACK
Mansur.Hasib@umuc.edu
Twitter: @mhasib
www.cybersecurityleadership.com
Copyright©- This work is the intellectual property of the author.
Anyone may copy or use the slides for educational purposes withattributionto Dr. Hasib.
Written permissionrequiredfor any commercial use.

The session will discuss means in which information assets and business continuity is protected and propose an additional layer of defense with a human counterespionage focus. The proposed proactive counterespionage plan includes operational security audits, reverse open source intelligence and classification of employees who are prime targets for disruptive espionage. - See more at: http://www.rsaconference.com/events/ad15/agenda/sessions/2219/proactive-counterespionage-as-a-part-of-business#sthash.JUipJ0BR.dpuf

2018 CISSP Mentor Program Session 1

FRSecure

This document provides an overview of the CISSP Mentor Program session #1. It introduces Evan Francen and Brad Nigh, who lead the program. It discusses the severe talent shortage problem in cybersecurity, noting projections of millions of unfilled jobs by 2021 and factors contributing to this problem. It also outlines the agenda, schedule, and structure for the mentor program classes, which will cover CISSP domains and preparation for the exam.

Event report 2014 published

DSCI_Connect

We are pleased to release the proceedings and outcomes of the event, titled, “AISS 2014: Strengthening Perspectives on Cyber Security & Privacy.” The event report highlights notable initiatives and sessions, as encompassed within ‘#SpecialConversation’. These include the launch of DCPP©, a credentialing program that aims to build capacity and the DSCI Innovation Box, workshops on ‘Automotive Network’ and a special session on ‘Women Security Leaders’. Read more here: http://goo.gl/jc8yDd

CapTech Talks Webinar November 2023 Tom Vazdar slides.pptx

CapitolTechU

Diversity in Cybersecurity Education - 2016 ICT keynote - M.Rosenquist

Matthew Rosenquist

BCI Hyd Forum Newsletter Aug'17

BCI Hyderabad Forum

The document summarizes a cyber resilience and privacy conference held in Hyderabad, India. It includes: - Welcome addresses and introductory remarks setting the context around increasing digital transactions and data in India. - A keynote on the future of cyber security discussing how vulnerabilities are openly exploitable and organizations need to invest in hunting skills to prevent attacks. - Panel discussions on the challenges of the 4th industrial revolution for boards, executive cyber simulation experiences, and insights from a global cyber resilience survey. - Breakaway sessions on cutting edge technologies, blockchain, privacy and data protection with a focus on the EU's GDPR. - Live product demonstrations on mobile device protection and a discussion on corporate forensics

Information Is Power! Using Defensive Solutions in Cybersecurity

Career Communications Group

Learning Objective: Learn and explore the benefits and opportunities in cybersecurity Living and work environments have been revolutionized by technology, and it seems the possibilities are endless. From social networking to homeland security, the impact of technological advancements is massive. However, as technology is used to capture every corner of our world, the terror of cyber threats and abuse remains an ongoing battle. Join us in this seminar where a panel of cybersecurity professionals discusses approaches to protect critical intelligence and design practical solutions for defending and avoiding cybercrime and attacks before they happen. At the end of this seminar, participants will be able to: a. List strategies for building a safe and secure cybersecurity environment. b. Explore strategy and policies that impact cybersecurity. c. Examine the impact and cybersecurity in diverse industries. d. Explore advances and opportunities for STEM professionals. e. Identify ways to get ahead of the threat.

The document discusses cybersecurity education and workforce development. It defines cybersecurity and explains why it is important in protecting national security, critical infrastructure, and personal information. It notes that everyone is impacted and that vulnerabilities exist due to sophisticated attacks, insufficient training, and a lack of workforce. Efforts to address these issues include the Cybersecurity National Action Plan, National Initiative for Cybersecurity Education, and the NICE Cybersecurity Workforce Framework. Graduate students have an important role to learn, teach, and help enable positive change in cybersecurity.

STAYING SAFE AND SECURED ON TODAY AND TOMORROW’S AFRICA CYBERSPACE WORKSHOP 2017

Maurice Dawson

This is the most essential programme of the year around the dangers of cybercrime and how to manage safety within the most indispensable digital sphere & technology system. The reason is that, “Looking beyond Internet of Things (IoT) to Internet of Everything there is a potential market that is approximately $14.4 trillion and over 99% of physical devices are still unconnected.” ~Mo Dawson. Your participation give you golden access to a transcending Cyberspace picture, enhanced solution oriented capabilities as an ICT expert or practitioner, Telecommunications Corporates & Companies Personnel, Aviation ICT Officials, Other Transportation controls network hubs, Business dealer in Cyberspace services provider or supplier, Academicians and researchers, Government Departments & Public service ICT systems Officials & staff, Students, general ICT security involvement and on top of that your enhanced multidimensional scope & prosperity out of this untapped gold mine is guaranteed.

Rodney Petersen's KEYNOTE at the TALK Cybersecurity Summit 2017

Dawn Yankeelov

Prof Irene McAra-McWilliam, Glasgow School of Art

Interactive Scotland

Prof. Irene McAra McWilliam discussed Paul Baran's 1964 work "On Distributed Communications" which proposed a future all-digital data network with common user services and high connectivity. McWilliam advocates for designing alternative preferable futures that are ethically directed towards human wellbeing, using tools for intelligent decision-making and foresight to generate insight and present action. She discusses opportunities in digital futures including qualities of long life, extreme collaborations across scales, distributed clusters and care in a sharing economy, and flat leadership with power and participation.

Digital Cyber Risk Security Malaysia.pptx

Philip Irode; CISA,CRISC,CISM, CBCI & ITIL v3.

This document discusses cybersecurity initiatives in Malaysia. It outlines Malaysia's strategy to enhance cybersecurity through five pillars: effective governance; strengthening legal frameworks; catalyzing innovation; capacity and capability building; and global collaboration. It also summarizes the vision and mission of CyberSecurity Malaysia and the Digital Forensics Research and Services center to develop a safer cyber ecosystem through research, education, and public awareness programs. Finally, it stresses the need for innovative, adaptive cybersecurity approaches and public-private partnerships to address evolving cyber threats.

Assignment 3

annawiebus

The document discusses several topics related to freedom of expression, human rights, and design. It references the US Constitution and the Universal Declaration of Human Rights to support the right to freedom of expression. It proposes implementing fair trade policies in design companies to guarantee good working conditions. It also calls for equal pay for equal work in creative industries regardless of attributes like gender, race and identity.

Assignment 03 - US Constitution Group Project

MadisonSpenceMoore

Regional Cyber Security Summit 2016 May 11th-13th Weston Hotel Nairobi Kenya

Martin M

This document provides information about the Regional Cyber Security Summit 2016 happening from May 11-13 in Nairobi, Kenya. The summit will discuss securing enterprises in today's connected world and ensuring business continuity in the face of human, organizational, and governance factors related to cybersecurity. Over the three days, expert speakers will lead discussions on best practices in cybersecurity management and key issues like the skills gap in Africa, virtualization security, the internet of things risks, and using data analytics for cyber intelligence. Attendees will include CISOs, CIOs, and other IT security professionals. The goal is information sharing across the region to help organizations improve their cybersecurity posture through better funding, skills, and awareness of

Effectiveness of Cyber Security Awareness.pdf

Chinatu Uzuegbu

Chinatu Uzuegbu is a cyber security expert with over 20 years of experience in IT and 10 years specifically in cyber security. She discusses the importance of cyber security awareness and outlines some best practices. Effective cyber security awareness programs should be targeted to specific audiences, interactive, aligned with business objectives, and involve collaboration between cyber security professionals. Regular awareness training and reinforcement of knowledge is needed to help organizations and individuals protect against the growing threat of cyber attacks.

Cyber Security for the Employee - AFP Annual Conference 2016

Brad Deflin

This document outlines a proposed employee-based cyber security training and education program. It begins by establishing the need for such a program, noting that cyber risk is increasing and now poses an existential threat. It argues that the human element remains the weakest link for enterprises. The goals of the program are to instill long-term cultural and behavioral changes across the enterprise to better manage cyber risk. The program aims to inform employees about cyber threats, educate them on security frameworks, and empower them with skills for life-long cyber security. It would involve interactive workshops, online awareness training, testing, and attack simulations to train and assess employees.

Education to cyber security

zapp0

This document outlines a proposed solution to address the shortage of cybersecurity experts through education. It identifies the problem of not enough cybersecurity professionals to meet demand. The solution involves defining objectives like attracting more people to the field, and developing a strategy that includes creating new university cybersecurity programs, marketing cybersecurity as an appealing career, and learning from other countries' approaches to grow their cybersecurity workforce through public-private partnerships and scholarship programs. The strategy would aim to develop a complex curriculum approach to cybersecurity education from the ground up rather than just adding it onto existing computer science programs.

Explore Advanced Cybersecurity Training Programs

Thinkcyberindia

ISACA UAE - Importance of Human-Centric Approaches to Cyber Security

Dr. Lydia Kostopoulos

ISACA UAE Conference - ISAFE 2015 (Conference Presentation - October 28, 2015 - Dubai) Presentation Abstract: Traditional cyber security defenses center around technology, with controls around networks, servers, devices, software as well as data. This approach helps mitigate technological threats but not human threats. Social engineering attacks have increased over the past years with vishing and phishing attacks becoming more frequent. However, end-user awareness on social engineering mitigation has not followed that same upward trend. This session explores human-centric cyber security defenses that support a more robust defense in depth approach, emphasizing the importance of end-user awareness, operational security strategies and identification of internal human based vulnerabilities.

The Most Innovative Cyber Security Leaders to Watch in 2023.pdf

ciolook1

Cybersecurity for Science

Von Welch

Von Welch from the Center for Trustworthy Scientific Cyberinfrastructure discusses cybersecurity for science. The center aims to increase understanding of cybersecurity for the NSF community and advance its implementation. The presentation outlines that cybersecurity has historically focused only on technical aspects but now must support the scientific mission by managing risks. It also discusses trust in science data and ensuring infrastructure does no harm. The center engages with various science projects, provides education and training, and organizes cybersecurity summits to facilitate collaboration.

40 under 40 in cybersecurity. top cyber news magazine

Bradford Sims

This document is a magazine highlighting outstanding cybersecurity professionals from around the world. It contains short profiles and articles on various topics in cybersecurity. The opening includes an introduction from the editor highlighting remarkable cybersecurity talents from 19 countries working to build a safer digital future. There are then several articles on topics like the growing skills shortage in cybersecurity and the importance of training "cyber warriors" to work on the front lines of security. Other pieces discuss the ongoing challenges in cybersecurity and hope that more cross-disciplinary approaches can be brought to improve the field. The magazine serves to both recognize top professionals and discuss important issues in cybersecurity.

40 under 40 in Cybersecurity 2022. Top Cyber News MAGAZINE

TopCyberNewsMAGAZINE

This document is a magazine highlighting outstanding cybersecurity professionals from around the world. It contains short profiles and articles on various topics related to cybersecurity. The magazine includes an editorial emphasizing the need for cybersecurity training focused on front-line roles to address skills shortages. It also contains articles on the importance of raising public awareness of cybersecurity, seeing cybersecurity as a journey rather than a destination, integrating other fields like psychology into cybersecurity, and taking a business-first approach to cybersecurity. The magazine profiles 19 cybersecurity professionals from different countries and continents working to create a more secure digital future.

Maxa förtroende - gör medarbetarna till influencers - frukostseminarium 170330

Comprend

Cybersecurity Internship Opportunities for Tomorrow's Defenders.pptx

hunterboy350350

Techbyheart is on a transformative journey to redefine education in India, pioneering futuristic courses that extend beyond cybersecurity. As the educational landscape evolves in the digital age, Techbyheart recognizes the need for innovative approaches to learning. With a commitment to becoming India’s premier destination for cutting-edge education, Techbyheart offers a spectrum of courses designed to equip learners with skills vital for success in the digital era.

Information Governance in the Cloud: Compare and Contrast (2020 update)

Dr. Mansur Hasib - #InfoGov17 - Information Governance & Cybersecurity Leadership = Business Success Strategy

Recommended

Recommended

More Related Content

Similar to Dr. Mansur Hasib - #InfoGov17 - Information Governance & Cybersecurity Leadership = Business Success Strategy

Similar to Dr. Mansur Hasib - #InfoGov17 - Information Governance & Cybersecurity Leadership = Business Success Strategy (20)

More from ARMA International

More from ARMA International (20)

Recently uploaded

Recently uploaded (20)

Dr. Mansur Hasib - #InfoGov17 - Information Governance & Cybersecurity Leadership = Business Success Strategy