Strategy If you dont know where youre going
- Slides: 42
Strategy: If you don’t know where you’re going, you’ll never get there Don Welch, Ph. D. CISO Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Agenda • Introduction • Risk • Strategy Basics • IT and Business Strategy • Strategic Analysis • Design Framework • Communicating the Strategy Be Cyber. SMART. Get Cyber. SECURE.
Introduction Be Cyber. SMART. Get Cyber. SECURE.
Why listen to me? Be Cyber. SMART. Get Cyber. SECURE.
Cyber Security Environment Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Foreign Intelligence Be Cyber. SMART. Get Cyber. SECURE.
Criminals Be Cyber. SMART. Get Cyber. SECURE.
Hacktivists Be Cyber. SMART. Get Cyber. SECURE.
C-Level Leaders Be Cyber. SMART. Get Cyber. SECURE.
Risk Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Strategy 101 Be Cyber. SMART. Get Cyber. SECURE.
Strategy: Definition High level plan to achieve one or more goals under conditions of uncertainty • Wiki. Pedia Be Cyber. SMART. Get Cyber. SECURE.
Strategy: Definitions A pattern in a stream of decisions • Henry Mintzberg, Mc. Gill University Be Cyber. SMART. Get Cyber. SECURE.
Strategy: Definitions Planning and marshalling resources for their most efficient and effective use • Business Dictionary Be Cyber. SMART. Get Cyber. SECURE.
Strategy: Definitions • Plan to achieve long-term goals • Guide for decisions at all levels • Efficient and effective resource allocation Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Asymmetry and Adversaries Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Strategic Environment Analysis Threat Asset Impact Attacker Payoff Capability Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Constraints • Funding • Regulations and Laws • Staff Time and Talent • Business Overhead • Political Capital • Accountability • Calendar Time Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Coverage Matrix People Process Technology Identify Protect Detect Respond Recover Be Cyber. SMART. Get Cyber. SECURE.
Example Nested Matrix Detect/Technology Near Real-Time Network Payload Endpoint Post Compromise Be Cyber. SMART. Get Cyber. SECURE.
Example Nested Matrix Protect/People Mandatory Optional Users IT Staff Security Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Written Plan • One Pager • < 10 Pages • Full Document Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Information Security Strategy Low Moderate Identify Protect High + (Restricted) Watch Respond Recover Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
Be Cyber. SMART. Get Cyber. SECURE.
- Cybersmart definition
- Tic tac toe going high going low going criss cross lollipop
- What are the signs of an asexual person
- Dont ask dont tell political cartoon
- Dont laugh at me dont call me names
- What they dont know wont hurt them
- If you dont know where to go
- If you are going through hell, keep going means
- How do you do a z in sign language
- Tomorrow i dont know
- I dont know how to revise
- I don't know about tomorrow
- Japanese i dont know
- You cant manage what you dont measure
- If you can't measure it you can't improve it quote
- Hope youre doing well
- How to act angry
- Good afternoon hope all is well
- Jesus you're my firm foundation i know i can stand secure
- Tlri generator services
- Youre my king
- If love is the answer you are wrong
- If less is more how you keeping score
- Tentative goal statement
- Draw the core
- And the tree was happy but not really
- How did the vikings know where they were going
- Where are you going where have you been true story
- Where are you going where have you been annotations
- Clip clop and you don't stop
- Know history know self
- Dilan gorur
- I know who goes before me
- Do you know about minecraft
- ,,
- Personification in the raven
- If you're blue and don't know where to go
- Do you know who you are
- I will follow you follow you wherever you go
- Your dreams stay big and your worries stay small
- Are you sure you have a strategy
- Whats an external conflict
- Wear this there