The CISO Journey

As a CISO, I approached Gene's book with caution. Put two such people in a room and ask them a question, and an argument will inevitably ensue - even if they agree. Therefore, and as you might expect, I found some of Gene's conclusions to differ from mine. But what really stood out to me is how, even as I was having these arguments play out inside my head, I seemed to also be adopting an almost imperceptible yet constant nod. I could not help but enjoy reading his thoughtful analysis of every information security topic that he chooses to tackle, and his ability to tie everything together in an easy-to-understand, clear and logical fashion is highly appreciated and sorely needed in the industry.

Then, as I continued my journey through Gene's carefully laid-out thoughts and explanations, personal experiences, war stories, and insightful advice, it became apparent that this is far more than merely an instructional book into the many aspects of managing information security. Indeed, for anyone who is interested in advancing their career in the field, this book offers countless tools that can be followed to success, in every area. Just the chapter "NEVER trust and ALWAYS verify" is itself worth the price of admission.

Consume it slowly, and give it the attention it deserves, and Gene's book will repay you for it in spades. You may not follow his exact path, but whatever path you take, his guidance will certainly help you forward.

-- Barak Engel, CISO and author of Why CISOs Fail: The Missing Link in Security Management--and How to Fix It

Gene Fredriksen's The CISO Journey is a valuable and insightful guide for aspiring and seasoned Chief Information Security Officers (CISOs). Fredriksen leverages his extensive experience to provide practical advice on navigating the multifaceted challenges of the CISO role. His blend of personal anecdotes and professional insights offers readers a comprehensive understanding of balancing technical expertise with strong leadership skills. This approach makes the book informative but also engaging and relatable.

One of the standout aspects of the book is its emphasis on the importance of having a robust information security plan. Fredriksen underscores that a well-structured plan is essential for protecting an organization's data and ensuring operational resilience. He stresses the need for a balanced approach integrating people, processes, and technology. This holistic view is crucial for developing effective security strategies adapting to the rapidly evolving threat landscape. Fredriksen's practical tips on creating and maintaining these plans particularly benefit CISOs looking to strengthen their organization's cybersecurity posture.

Additionally, Fredriksen highlights the critical role of mentorship and continuous professional development. He advocates for fostering a security-minded culture within organizations and emphasizes the value of collaboration and ongoing learning. By sharing his journey and the lessons he has learned, Fredriksen provides a roadmap for CISOs to develop their skills and advance their careers. The CISO Journey is a must-read for cybersecurity professionals seeking to enhance their strategic and leadership capabilities while effectively managing information security.

-- Tom Godlove, Ph.D.