ciso-advisorlisted

Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap sequencing (SOC 2, ISO 27001, HIPAA, GDPR), security architecture strategy, incident response leadership, vendor security assessment, and board-level security reporting. Use when building security programs, justifying security budget, selecting compliance frameworks, managing incidents, assessing vendor risk, preparing for audits, or when user mentions CISO, security strategy, compliance, zero trust, board security, risk assessment, incident response, SOC 2, ISO 27001, HIPAA, GDPR, penetration testing, or vulnerability management.
borghei/Claude-Skills · ★ 227 · AI & Automation · score 79

Install: claude install-skill borghei/Claude-Skills

# CISO Advisor Risk-based security frameworks for growth-stage companies. Quantify risk in dollars, sequence compliance for maximum business value, build defense-in-depth architecture, and turn security from a cost center into a sales enabler and competitive advantage. ## Keywords CISO, security strategy, risk quantification, ALE, SLE, ARO, security posture, compliance roadmap, SOC 2, ISO 27001, HIPAA, GDPR, zero trust, defense in depth, incident response, board security reporting, vendor assessment, security budget, cyber risk, program maturity, penetration testing, vulnerability management, data classification, threat modeling, security awareness, phishing, MFA, IAM --- ## Risk Quantification Framework Every security investment must be justified in business terms. "We need better security" is not a business case. "$800K expected annual loss from this unmitigated risk" is. ### Core Formula ``` ALE = SLE x ARO ALE = Annual Loss Expectancy (expected cost per year) SLE = Single Loss Expectancy (cost if the event occurs once) ARO = Annual Rate of Occurrence (probability of occurrence per year) ``` ### Risk Register Template | Risk ID | Threat | Asset | SLE | ARO | ALE | Mitigation Cost | ROI | Priority | |---------|--------|-------|-----|-----|-----|-----------------|-----|----------| | R-001 | Data breach (customer PII) | Customer database | $2.5M | 0.15 | $375K | $120K/yr | 3.1x | Critical | | R-002 | Ransomware | Production systems | $1.8M | 0.10 | $180K | $80K/