Why CISOs Fail ─ The Missing Link in Security Management-and How to Fix It

This book provides insight as to why and how current security management practices fail at their basic foundation, resulting in overall dissatisfaction by practitioners and lack of success in the corporate environment. The author examimes the reasons and how to fix them. The resulting improvement is highly beneficial to any corporation that chooses to pursue this approach/strategy and from a bottom-line and business operations perspective, not just in technical operations. This book transforms the understanding of the role of the CISO, the selection process for a CISO, and the financial impact that security plays in any organization.

Barak has over 25 years of experience in technology, operations, and business management, including over 15 years of information security management experience. Barak came up with the concept of "virtual CISO" - an outsourced, fully managed security suite for companies that wish to implement a security program and mature it over time, at an early stage of developing his consulting practice, and it has become the cornerstone of its service offerings. In this capacity, he has successfully created, developed, grown and run several security organizations as CISO in multiple companies across different industries, and developed his reputation as a nationally recognized security compliance subject matter expert, visionary, and leader. He has spoken frequently in conferences, private industry events, and other venues, authored, both under his own name and as a ghost writer, multiple trade articles, was quoted by media sources, had appearances on local and national TV, wrote the compliance section of a highly respected book on technology operations management, and participated in a number of respected forums, such as a US representative in a state dept hosted conference on global cybercrime. Has was also part of the Israeli team that assisted US authorities in apprehending the late 90s notorious hacker, the Analyzer.