http://www.sans.edu/research/leadership-laboratory en-us (C) SANS Institute 2012 webmaster@sans.org (SANS Webmaster) http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/_Ga-pNFP9DA/risk_assessment http://www.sans.edu/research/leadership-laboratory/article/risk_assessment ]]> http://www.sans.edu/research/leadership-laboratory/article/risk_assessment http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/qLcADK7mxj8/manage_message http://www.sans.edu/research/leadership-laboratory/article/manage_message At SANS.edu we teach the following six step process for computer security incident response and this can also be applied when responding to public disruptive events: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned.

]]> http://www.sans.edu/research/leadership-laboratory/article/manage_message http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/320OwPzxolY/sti_risk_appetite http://www.sans.edu/research/leadership-laboratory/article/sti_risk_appetite The SANSTechnology Institute accepts anelement of risk in almost every activity it undertakes and risk appetite can be determined by answering the question: “How willing is STI toaccept risk related to key initiatives, business and educational drivers?” This essay uses a five point scale to rank risk appetite.

]]> http://www.sans.edu/research/leadership-laboratory/article/sti_risk_appetite http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/10_pCYnCE-g/smart_mgt512_action http://www.sans.edu/research/leadership-laboratory/article/smart_mgt512_action

Is the action item sufficiently specific that a person knowledgeable about the task could describe it to someone else?

Can the task output be measured?

Can the task be done? This question sounds too obvious, but remember that no job is impossible for the person who doesn't have to do it. Make sure you don't fall into that trap.

Is the goal realistic? Again, will it withstand scrutiny by a knowledgeable third party? If not, perhaps the objective needs rework. Is the objective stated in such a way that the person responsible can be expected to know when it is due?

]]> http://www.sans.edu/research/leadership-laboratory/article/smart_mgt512_action http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/-J4If6WGdp4/path_to_infosec http://www.sans.edu/research/leadership-laboratory/article/path_to_infosec ]]> http://www.sans.edu/research/leadership-laboratory/article/path_to_infosec http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/ejVEPBbItwE/leadership_essay http://www.sans.edu/research/leadership-laboratory/article/leadership_essay This essay defines the management and leadership competencies taught at the SANS Technology Institute. Most of them are covered in MGT421 Leadership and Management Competencies; MGT512 Security Leadership Essentials; and, MGT525 Project Management and Effective Communications.

]]> http://www.sans.edu/research/leadership-laboratory/article/leadership_essay http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/9WT0Ph4aJSI/sti_cpr_essays http://www.sans.edu/research/leadership-laboratory/article/sti_cpr_essays
]]> http://www.sans.edu/research/leadership-laboratory/article/sti_cpr_essays http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/7GDlvg-T8aQ/gslc_how_to_pass http://www.sans.edu/research/leadership-laboratory/article/gslc_how_to_pass If you will invest some time to prepare before starting your MGT512 class you will be able to follow the material discussed in class better. Additionally, the more you prepare for the GSLC exam the better you will do on your exam. Here are a few tips that will help you get the most out of your class and exam.

]]> http://www.sans.edu/research/leadership-laboratory/article/gslc_how_to_pass http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/i6wPcA7418c/horwath_421_leader http://www.sans.edu/research/leadership-laboratory/article/horwath_421_leader Jim Horwath, MSISE student at SANS Technology Institute (STI) examines the importance of mentoring young employees in order to build future leaders.

]]> http://www.sans.edu/research/leadership-laboratory/article/horwath_421_leader http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/FrfJcvriJS8/stiwg_what_is_an_a3 http://www.sans.edu/research/leadership-laboratory/article/stiwg_what_is_an_a3 The Planning and Governance Self-Study working group has a set of research questions that guide its actions. Here, we look at a primary element of governance, the A3.

]]> http://www.sans.edu/research/leadership-laboratory/article/stiwg_what_is_an_a3 http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/Lf9k01iFJSI/oneonone_meetings http://www.sans.edu/research/leadership-laboratory/article/oneonone_meetings Richard Wanner, MSISE student at SANS Technology Institute, examines the importance of one-on-one meetings in the workplace and provides a framework for implementing successful one-on-one meetings with employees.

]]> http://www.sans.edu/research/leadership-laboratory/article/oneonone_meetings http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/SmDdg8UQV0o/pandemic_watch2010 http://www.sans.edu/research/leadership-laboratory/article/pandemic_watch2010 H1N1 Pandemic is no longer a world wide threat. We are watching the "Superbug" and H1n5, but they are not very contagious. The content is tailored to infosec and disaster recovery professionals who may need to brief senior management. In the Northern hemisphere the primary focus should be preparing work from home capability for the 2010/2011 and standard winter flu.

]]> http://www.sans.edu/research/leadership-laboratory/article/pandemic_watch2010 http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/B1361M6Sscw/revital_scholarship http://www.sans.edu/research/leadership-laboratory/article/revital_scholarship The SANS Workplace Revitalization Scholarship Program is designed to help employed workers who were formerly technical but have moved into middle management positions and now want to regain their technical edge. Apply before August 31, 2010 to receive heavily discounted training and GIAC exams focusing on digital forensics.

]]> http://www.sans.edu/research/leadership-laboratory/article/revital_scholarship http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/GU1DnafNE8I/mentor_2010_anis http://www.sans.edu/research/leadership-laboratory/article/mentor_2010_anis The SANS Mentor program is an innovative approach to training for information security professionals - one description is specialist assisted self-study. SANS recognizes the unique aspects of this training and wants to give special recognition to Mentors that put the extra effort into making sure their students have the best training possible. Chris is one of those very special people with talent and a willingness to share their knowledge.

]]> http://www.sans.edu/research/leadership-laboratory/article/mentor_2010_anis http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/Gk9S0IEk0sU/mentor_2010_crowley http://www.sans.edu/research/leadership-laboratory/article/mentor_2010_crowley The SANS Mentor program is an innovative approach to training for information security professionals - one description is specialist assisted self-study. SANS recognizes the unique aspects of this training and wants to give special recognition to Mentors that put the extra effort into making sure their students have the best training possible. Chris is one of those very special people with talent and a willingness to share their knowledge.

]]> http://www.sans.edu/research/leadership-laboratory/article/mentor_2010_crowley http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/bLr8Cu3Kp8Y/couture_sti_essay http://www.sans.edu/research/leadership-laboratory/article/couture_sti_essay Erik has been accepted as a candidate for the Master of Science Degree in Information Security Engineering. His essay describes leadership in military communications.

]]> http://www.sans.edu/research/leadership-laboratory/article/couture_sti_essay http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/naniQ48dyGI/sti_essay_fuller http://www.sans.edu/research/leadership-laboratory/article/sti_essay_fuller Kevin Fuller has been accepted as a candidate for the Master of Science Degree in Information Security Engineering. His essay describes his experiences in “technical” leadership.

]]> http://www.sans.edu/research/leadership-laboratory/article/sti_essay_fuller http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/Dp-tZJpsbMA/fitzpatrick_mgt421 http://www.sans.edu/research/leadership-laboratory/article/fitzpatrick_mgt421 http://www.sans.edu/research/leadership-laboratory/article/fitzpatrick_mgt421 http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/gqvT8emNPXk/fitzpatrick_stiessay http://www.sans.edu/research/leadership-laboratory/article/fitzpatrick_stiessay ]]> http://www.sans.edu/research/leadership-laboratory/article/fitzpatrick_stiessay http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/ddzpuazynbo/businesssitawareness http://www.sans.edu/research/leadership-laboratory/article/businesssitawareness Business unit managers and business operations leaders are always telling information assurance managers that "Security needs to be aligned with business". This is one of the primary goals of both the SANS Technology Institute's Master of Information Security¹ programs and also the SANS Security Leadership Essentials² course, but what are the fundamental things security managers can do to help align security with the needs of the business? We suggest that progress is possible if there is a process in place to develop and maintain business situational awareness.

]]> http://www.sans.edu/research/leadership-laboratory/article/businesssitawareness http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/2h-CMTJPydY/mgt421_scott_pareto http://www.sans.edu/research/leadership-laboratory/article/mgt421_scott_pareto Charlie Scott, MSISE student at SANS Technology Institute, explores how information security managers can use the Pareto Principle to their benefit. The Pareto Principle, in general, means that approximately 80% of any given effect can be attributed to approximately 20% of the possible causes. Charlie prepared this paper for the SANS MGT 421: Leadership and Management Competencies course.

]]> http://www.sans.edu/research/leadership-laboratory/article/mgt421_scott_pareto http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/ceRL3vdO4SI/time_zones_work http://www.sans.edu/research/leadership-laboratory/article/time_zones_work Most people complain about time zones, they consider them an impediment. Let's consider some strategy to make time zones work in our favor as opposed to being a problem.

]]> http://www.sans.edu/research/leadership-laboratory/article/time_zones_work http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/YWTjKYnY4ss/erosion_privacy http://www.sans.edu/research/leadership-laboratory/article/erosion_privacy Talking about Privacy is a bit like talking about Climate Change; there is a lot of data pointing in a number of directions, people have strong and conflicting opinions, and if we get this wrong, the consequences could be disastrous. As a leader, it is important to understand personal privacy and ensure you, your family, and the people that report to you are at least aware of the risks of ubiquitous data collection.

]]> http://www.sans.edu/research/leadership-laboratory/article/erosion_privacy http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/hQE2WgoM0Zg/1588 http://www.sans.edu/research/leadership-laboratory/article/1588 Ahmed Abdel-Aziz, MSISE student at SANS Technology Institute, discusses the importance of Trust in leadership, how to build Trust, and how leaders use Trust to do good or evil. Ahmed prepared this paper for the SANS MGT 421 Leadership and Management Competencies course.

]]> http://www.sans.edu/research/leadership-laboratory/article/1588 http://feedproxy.google.com/~r/SansTechnologyInstitute/~3/q0gTktf9egs/137 http://www.sans.edu/research/leadership-laboratory/article/137 To be successful as a leader we need to budget our time, our resources, and our finances. Often we do not give sufficient consideration to our time. Take a minute to check your Daytimer; if you do not have regular appointments six months out or more to do the critically important tasks such as planning, personnel management, and systems and budget reviews, it is an indication that you are living day to day. It means every crisis that comes up can derail your program. Studies continue to show people that say what they are going to do, as well as when and where they are going to do it outperform those that do not.

]]> http://www.sans.edu/research/leadership-laboratory/article/137