ABSTRACT

Security communication takes on many forms such as the publishing of information security policies, selling the next information investment to management, explaining the current status of security audit issues to the board of directors, crafting security e-mail messages of the latest security concerns, or simply having a conversation about a security issue with a security colleague or business unit manager. This chapter discusses how security professionals can improve their communication skills to convey the appropriate security messages throughout the organization. Different aspects of communication are explored and by understanding the different communication styles that are occurring within the company, the security executive and professional can be more effective in constructing and delivering the appropriate message. When communicating a security concern or initiative with the intuition thinking temperament, the security professional should attempt to appreciate their objectivity, quick minds, and knowledge.