Cyberspace Security Expert Sly Cotton: 10 Top Skills For A Great Cyber Security Chief

Cybercriminals are not just evolving; they are thriving. According to one cybersecurity expert, the ever-increasing intertwining of our lives with technology necessitates a vigilant defense by every organization to ward off cyber threats.

“Protecting personal data requires the utmost care to preserve treasured memories, home privacy, and life’s conveniences,” says Sylvester “Sly” Cotton, PhD, who had a distinguished career within the Department of Defense and the US Army dedicated to the security of digital infrastructure. He is the author of Cyberspace Guardians: A Comprehensive Guide for Choosing the Right CISO (2023, distributed by Indie Books International).

“A skilled chief information security officer (CISO) is the vanguard of hope against persistent threats,” emphasized Cotton.

The influence of this combat veteran, a retired US Army Colonel, extends beyond the military sphere. Cotton’s expertise found resonance in academia and industry, including Unisys Corporation, Engility/SAIC, CALIBRE Systems, and Jacobs.

“The CISO’s battlefield is not just in the trenches of code and data; it extends to boardrooms, team huddles, and strategy brainstorming sessions,” says Cotton. “Their leadership finesse, communication prowess, collaborative spirit, adaptability, and strategic mindset form the magical bridge linking the worlds of IT and business strategy.”

He earned his Information Systems and Technology Management Doctorate from the University of Phoenix, Master’s Degrees from the Webster University and the US Army War College, and undergraduate degree from Alcorn State University. His credentials as a Project Management Professional (PMP) and a certified ITIL Service Manager accentuate his commitment to industry best practices.

Cotton asserts that CISOs are not merely executors of technical tasks. “The transformative role necessitates a multifaceted skillset—a blend of technical acuity, strategic foresight, leadership, and the talent to predict and tackle complex security threats.”

Here are the hard and soft skills Cotton says you should look for in a great cyber security chief officer:

1. Technical Expertise: This technical savvy empowers the CISO to predict and combat cybersecurity threats, fortifying the organization’s digital fortress. A CISO must exhibit a comprehensive knowledge of diverse cybersecurity aspects, like encryption, network security, cloud computing, and data protection.
2. Risk Management: This ability necessitates a harmonious blend of technical understanding and strategic foresight to foresee potential threats and craft preemptive countermeasures. This also involves creating a culture of security awareness within the organization.
3. Compliance: The CISO must ensure the organization’s adherence to an ever-evolving landscape of laws and regulations related to data security and privacy. Failure to comply can result in severe penalties and damage to the organization’s reputation, making this skill absolutely critical.
4. Incident Response: This capability involves developing comprehensive incident response plans, coordinating response teams, and ensuring the quick recovery of affected systems. Incident response also encompasses communication skills.
5. Vendor Management: This skill involves evaluating vendors’ security practices, monitoring their compliance, and dealing with potential vulnerabilities. A CISO must ensure that all partners in the business ecosystem uphold the same high-security standard.
6. Leadership: This role goes beyond being an expert on cyber threats. It is about leading the organization with a clear vision, communicating effectively with various stakeholders, and making critical decisions under pressure.
7. Communication: A CISO must possess excellent communication skills to relay information about cybersecurity to various audiences effectively and must be adept at tailoring their communication to the audience’s understanding level.
8. Collaboration: They must work closely with IT, legal, HR, and operations to ensure a holistic approach to cybersecurity. This collaboration enables them to align security strategies with the broader organizational objectives and ensures that all departments comply with the organization’s security policies.
9. Adaptability: A CISO must be highly adaptable, constantly updating their knowledge and skills to stay ahead of the curve. This adaptability extends to managing changes within the organization, such as new technologies or business processes, ensuring that the organization’s security measures remain robust despite these changes.
10. Strategic Thinking: They predict looming threats and architect far-reaching security strategies. This foresight blooms from a profound understanding of the organization’s business objectives, the current cybersecurity landscape, and potential future trends.

“CISOs must be visionary leaders, helming the complex task of safeguarding an organization’s digital assets while ensuring that security roadblocks do not hinder its strategic ambitions,” says Cotton.