ABSTRACT

Cybersecurity has typically been organized in a central area due to the need to concentrate on coordination and skill development. Cybersecurity processes can also be informed by leveraging the security incidents of others to improve the ongoing processes. The McKinsey 7-S Framework applied to cybersecurity becomes a holistic tool for the Chief Information Security Officer (CISO) to evaluate what is missing within the organization. While the McKinsey 7-S Model was geared towards examining an overall organization and creating changes that would succeed in delivering upon the strategy, this model can be leveraged by the CISO to build and lead an effective cybersecurity program, referred to as the 7-S Framework Applied to Cybersecurity Leadership. The 7-S Framework has been around since the first publication of the idea several decades ago as a method to examine organizational effectiveness. The 7-S Framework was used as the basis for this book to examine the CISO organizational effectiveness.