Executive Security Roles
CIO (Chief Information Officer)
- Enables business growth through technology
- Sets IT strategy and direction
- Accountable for IT risk and compliance
- Driven by business agility
CISO (Chief Information Security Officer)
- Ensures technology is secure
- Sets security strategy and direction
- Accountable for security risk and compliance
- Driven by risk control
- May report to CIO, CEO, or board
Management Roles
Security Operations
- Security Operations Center (SOC)
- Incident Response
Risk & Compliance
- Security Risk Management
- Governance
- Compliance
Technical Leadership
- Security Engineering
- Application Security
- Project Management
Technical Roles
Defensive Security
- Security Analyst: Monitors and analyzes threats
- Threat Hunter: Proactively searches for threats
- Malware Analyst: Analyzes malicious software
Offensive Security
- Penetration Tester: Ethical hacker testing defenses
- Exploit Developer: Researches vulnerabilities
Engineering & Architecture
- Security Engineer: Builds security systems
- Cloud Security Engineer: Secures cloud environments
Intelligence & Analytics
- Threat Intelligence Analyst: Researches emerging threats
- Security Data Scientist: Uses data to improve security
Non-Technical Roles
Governance & Compliance
- Cybersecurity Policy Analyst: Develops security policies
- Compliance Specialist: Ensures regulatory compliance
Business & Strategy
- Cybersecurity Program Manager: Oversees security programs
- Third-Party Risk Manager: Manages vendor security
People & Culture
- Training Coordinator: Organizes security awareness
- Communications Officer: Liaises between teams
Legal & Privacy
- Data Protection Officer: Ensures GDPR compliance
- Cyber Legal Advisor: Provides legal guidance
Key Security+ Concepts
Security as a Team Effort
- No single person or department can cover all security responsibilities
- Requires multidisciplinary approach with diverse skills
- Different teams collaborate to manage cyber risk
- Security Operations Center (SOC) acts as the "nerve center"
- DevSecOps integrates security into development ("Shift Left")
Core InfoSec Competencies
- Risk assessment and control testing
- Secure software/hardware configuration
- User access control management
- Log analysis and monitoring
- Incident response procedures
- Disaster recovery planning
- Security training development
- Secure coding practices
Security Control Types Exercise
Preventative Controls
- Windows folder access permissions
- Active Directory group-based access (Domain Users/Admins)
- Restricts unauthorized access to files/folders
Detective Controls
- Windows Local Security Policy file/folder auditing
- Logs access attempts and modifications
- Tracks file deletions for investigation
Directive Controls
- Logon banner messages via Local Security Policy
- Reminds users of Acceptable Use Policy (AUP)
- Encourages compliance through awareness
Corrective Controls
- Windows automatic crash recovery (BSOD)
- PowerShell SigVerif script to detect/file changes
- Restores files to known good state when altered