The CISO Playbook - Andres Andreu, Hector Monsegur - diskuze

Guiding security leaders and executives who hold the privilege of defending modern organizations, The CISO Playbook: The Adversarial Mindset is a leadership-focused blueprint for outmaneuvering adversaries that iterate relentlessly. In an era where attackers view corporate defenders as “dumb, weak, and ineffective” due to organizational drag and over-reliance on static tools, this book empowers leaders to reclaim the initiative by adopting a true adversarial mindset. Harnessing the concept of decision advantage, the book moves beyond treating incidents as isolated technical events by thinking in adversary terms: objectives, constraints, and tradecraft. It bridges the gap between attacker methods and board-level risk, showing how to translate security outcomes into the language of economics, earnings before interest, taxes, depreciation, and amortization (EBITDA), and revenue protection. Operationalizing lessons from real-world campaigns like SolarWinds, Volt Typhoon, and Operation Aurora, the text connects tradecraft to operational reality. It introduces the unique metric of time-to-hazard neutralization, moving past ticket metadata to focus on the verified removal of risk from the environment. Spotlighting the rise of the “Artificial Adversary,” a central thread details how artificial intelligence (AI)-enhanced human actors and autonomous systems act with malicious intent. From industrialized “vibe hacking” to active scanning and autonomous reconnaissance,
více informací