The Information Systems Security Officers Guide: Establishing and Managing an Information Protection Program

The ISSO professionals of the future will face many more challenges than is now the case—although for some that is hard to believe, as they battle under increased stress and pressure to protect corporate IE assets. As noted earlier, the world will continue to be an unsafe place, there will be more competition, and technology will support and also adversely affect corporations and the protection of the corporate assets.

The ISSO professional of the future should:

• Have a formal education including at least associate degrees and bachelor's degrees in computer science, criminal justice, business, sociology, government and politics, and psychology, and at least one master's degree (MBA in international business);

• Have certifications in all aspects of security and security-related fields, such as CPP, CFE, CISSP, CISA;

• Understand the world, changes in nation-states' relationships, different societies and cultures, and their impact on IE assets protection philosophies, strategies, and the like;

• Understand the global marketplace and competitors;

• Understand your corporation, its history, products, marketing strategies, processes; and plans;

• Understand how to establish and manage the most effective and efficient assets protection program that protects IE assets at least cost, at an acceptable level of risk, with least impact to corporate costs and schedules consistent with sound business and assets protection practices; and

• Understand the world and role of the ISSO professional in the future.