ABSTRACT

The chief information security officer (CISO) must be able to interact with multiple levels of management. The CISO must be able to communicate with individuals in different levels of the organizational hierarchy, from the board of directors to the end users and everywhere in between. Communication is a key when it comes to being a CISO. Effective oral communication depends upon generating a series of clear, straightforward messages that express the thoughts, feelings, and observations that need to be conveyed. Written communication takes on several forms in world from email, texting, twittering, social media posting, report writing, policy/procedure writing, and writing memos. Networking is much more than sending out an email with the resume and asking if anyone knows of a CISO job available. Soft skills involve understanding and interacting with people from different experiences, backgrounds, and their own motivations and current life situations.