Dr. Magda Lilia Chelly - Building a Cyber Resilient Business

A cyber handbook for executives and boards

Dr. Magda Lilia Chelly

Shamane Tan

Hai Tran

BIRMINGHAMMUMBAI

Copyright 2022 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

Group Product Manager: Vijin Boricha

Publishing Product Manager: Mohd Riyan Khan

Senior Editor: Shazeen Iqbal

Content Development Editor: Romy Dias

Technical Editor: Nithik Cheruvakodan

Copy Editor: Julie Kerr

Language Support Editor: Safis Editing

Project Coordinator: Neil Dmello

Proofreader: Safis Editing

Indexer: Manju Arasan

Production Designer: Nilesh Mohite

Marketing Coordinator: Ankita Bhonsle

First published: October 2022

Production reference: 1051022

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham

B3 2PB, UK.

ISBN 978-1-80324-648-2

www.packt.com

To the Chelly and Laaksonen families To my most fabulous husband, whom I cherish beyond words.

Dr. Magda Lilia Chelly

To my dearest husband, your love and encouragement mean the world to me. Im also thankful for my family and dear friends whore always cheering me onthis is for you. Finally, to my trusted circle and community who have grown together with me, Im grateful for your support.

Shamane Tan

To Hai Tran, who passed away while this book was being finalized.

Hed love to have seen his idea for this book, of helping as many organizations as possible derive the best value from cybersecurity functions, come to fruition.

Rest in peace now, my love, knowing that your legacy and unparalleled passion for the industry will be carried on by the many professionals who will find value insights from this book.

Natallia Tran (Hai Trans wife)

Dr. Magda Lilia Chelly is an award-winning global cybersecurity leader. She has been named one of the top 20 most influential cybersecurity personalities in 2017 and 2021 by ISFEC Global.

In her career, Magda has worn several hats, including Information Security Officer for multiple organizations. Magda co-founded a cybersecurity start-up in Singapore called Responsible Cyber Pte. Ltd.

Magdas speaking engagements address topics on cyber risk quantification, bridging the gap between business and cybersecurity, cyber awareness, diversity and inclusion in the cybersecurity industry, and cybersecurity investments and entrepreneurship. Magdas research around cybersecurity has been featured by IEEE, the RSA Conference, and the CYBER RISK LEADERS magazine.

I want to thank my husband for giving me the space and support Ive needed to write this book, even while the COVID-19 global pandemic was raging around us. Id also like to thank the Packt team for their support and patience for granting me the opportunity and time to complete this journey.

Many thanks for my Responsible Cyber team, and all my supporters throughout this journey.

Shamane Tan is the Chief Growth Officer at Sekuro, leading the security outreach strategy with the C-Suite and executives. Recognized by IFSEC as a Global Top 20 Cybersecurity Influencer and awarded ASEAN Top 30 Women in Security, the Cyber Risk Leaders and Cyber Mayday and the Day After author was listed in the 40 under 40 Most Influential Asian-Australians.

Awarded ARN Shining Star 2021 and AiSP Singapores Cybersecurity Professional, the TEDx speaker regularly chairs CxO thought leadership roundtables and serves on the Advisory Board for Black Hat Asia Executive Summit. Featured in Worlds Leaders Worlds 10 Most Influential Business Leaders in Cyber Security, Shamane is the founder of Cyber Risk Meetup, an international community and platform for cyber risk executives.

To God, my source of inspiration, vision, and passionPsalm 106:1. To my dear husband, who constantly cheers me on; thank you for your joy, encouragement, and celebration of my passion and vision. Thank you to my family, who have always been so understanding and supportive. You are so precious to me. Thank you Sekuro for being an amazing company that aspires to lead by example and challenges boundaries of what is possible and what is excellence. Thank you to my industry friends for your mentorship, for your contributions, and for shaping our industry for the benefit of everyones growth and development. Finally, to my co-authors Magda and Hai, it has been such a journey the last few years bringing this together. We finally got there, although it is mixed with sadness to realize that this book has become a legacy that Hai leaves behind. To the whole Packt publishing team, it has been such a pleasure working together on this incredibly meaningful project. Thank you!

A business-oriented and accomplished CISO, Hai Tran sought to leverage his exceptional governance, stakeholder engagement, and project management skills to manage risk by aligning mitigation strategies with business objectives. Hai had extensive leadership experience across a broad range of industries, including five years as the inaugural CISO for the Western Australia Police Force. Hais strong focus on communication and transparency gained him respect and an outstanding reputation. He had a pragmatic and business-led approach to security in that it should be an enabler, company-wide, and frictionless. He was a strong, visible, and effective leader, keen to share his knowledge and empower industry professionals to reach their potential.

Faisal Hussain (Syd) is a veteran in the field of cybersecurity engineering and threat hunting. Currently, Syd is managing a cybersecurity program for Microsoft customer protection in the United Kingdom and EMEA as a Microsoft Security Response Center (MSRC) partner.

Syd works for Microsoft Corporation as a cybersecurity expert, specializing in cloud and enterprise security, advising C-level executives and field experts in detecting and preventing threats and response strategies across the industry.

Syd has peer-reviewed and developed IPs for Microsoft field security teams and presented at various conferences as a speaker. Syd is a regular presenter on security briefing calls hosted by Microsoft.