I care about every corner of cybersecurity, but the part I’m most passionate about is the people side of it: culture, keeping good talent, and leadership. I’ve written a couple of books along the way, one on how to run security operations well and one on how to build teams that good people want to stay on. If either of those is on your mind right now, I hope one of them is useful to you. Both are published by CRC Press and are available on Amazon.
Cybersecurity Operations and Fusion Centers: A Comprehensive Guide to SOC and TIC Strategy
This book is a guide to setting up and running a Cybersecurity Operations and Fusion Center, which brings a security operations center (SOC) and a threat intelligence center (TIC) together. It walks through whether to build one from scratch or buy a solution that’s already built, and then covers designing the model, choosing the right partner, allocating resources, building the team, and putting the infrastructure and tools in place. It also covers the day to day work of monitoring and detection, security operations, and incident response, along with the reporting that helps an organization improve its security over time.
Securing Talent: Building and Retaining High-Performance Cybersecurity Teams
This book looks at the role culture plays in cybersecurity, at a time when organizations are short on skilled cybersecurity professionals. It talks about how the high stress of the work can drive people away, and why a positive, supportive workplace is what helps attract good people and keep them. It also makes the case for investing in training and in growing the next generation of cybersecurity professionals.
