Managing a CIAPP and Corporate Infosec Organization in the Future

The ISSO professional responsible for establishing and managing a CIAPP and corporate InfoSec organization in the future must do so using the philosophies stated throughout this book if he or she is to have an effective and efficient CIAPP. The ISSO professional must take every opportunity to use technology where it will support the CIAPP; however, the ISSO must also consider the human element and changes in world affairs.

The ISSO professional must be constantly learning and applying new techniques and processes, at the same time being a leader in the community, corporation, to the InfoSec staff, and in the professional associations.

The individuals who take on this challenge and apply cost-effective techniques will gain personal and professional rewards and will be able to say that they are truly ISSO professionals.

One of the key elements is the ability of the ISSO professional to be flexible, react, and change when needed to support the corporations' IE assets protection needs—cost-effectively.