[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-259901-105":53,"doc-detail-259901-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","strategic-communications-planning-for-a-ciso-strength-in-weak-ties","Strategic Communications Planning for a CISO: Strength in Weak Ties","","As information becomes a company’s most valuable asset, the executive accountable for preserving data integrity and security becomes central in complex enterprise environments. Effective policies, procedures, and training across multiple departments demand consensus-building capabilities and trust partnerships amid varied corporate dynamics. In crisis conditions such as data loss, accidental exposure of private information, or malicious system disruption, the CISO faces heightened scrutiny. The paper analyzes strengths, weaknesses, opportunities, and challenges of the CISO in a large public university and links outcomes to weak-tie interpersonal networks.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/strategic-communications-planning-for-a-ciso-strength-in-weak-ties/259901/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/strategic-communications-planning-for-a-ciso-strength-in-weak-ties/259901.png","ImageObject",442,249,{"name":88,"@type":89},"Nguyễn Văn Học","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-11-01","2026-09-13",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",13,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What major challenges define the CISO role in this paper?","Question",{"text":109,"@type":110},"Risk management is a moving target due to continual technology and user changes. The CISO also lacks direct responsibility and enforcement power over the equipment or systems at risk, relying instead on delegation and recommendations.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How does the paper connect cybersecurity management with weak ties?",{"text":114,"@type":110},"It uses the concept of weak ties—ties that connect groups through non-hierarchical relationships—to explain how interpersonal networks between a CISO and administrators support security governance.",{"name":116,"@type":107,"acceptedAnswer":117},"What method is used to analyze the CISO’s strengths and challenges?",{"text":118,"@type":110},"The paper reports findings from a series of six interviews with CISO stakeholders and applies the analysis steps outlined in Eugene Bardach’s eightfold policy analysis approach, framed through SWOT categories.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},259901,1791741409,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":8,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":79,"preview_page_count":4},1374402739827,"https://ap-avatar.wpscdn.com/avatar/14000c97e7351f1a627?x-image-process=image/resize,m_fixed,w_180,h_180&k=1787885694763230660","Open Access License Notice  \nThis article is © its author(s) and is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0) . This license applies regardless of any copyright or pricing statements appearing later in this PDF. Those statements refl ect formatting from the print edition and do not represent the current open access licensing policy.  \nLicense details: [https://creativecommons.org/licenses/by/4.0/](https://creativecommons.org/licenses/by/4.0/)  \nThe Colloquium for Information Systems Security Education (CISSE)  \nStrategic Communications Planning for a CISO: Strength in Weak Ties  \nAbstract  \nAs companies increasingly rate information as their most valuable asset, the executive in charge of maintaining the integrity and security of those assets has become the focal point for security problems in large and complex enterprise environments. Establishing the policies, procedures and training centering on data and system security across multiple departments requires unique consensus building skills and engendering trust partnerships across a complex range of corporate dynamics. And yet, in a crisis involving the loss of vital data, inadvertent disclosure of private information or malicious disruption of systems from outside bad actors, the CISO is in the hot seat. Often, the CISO office has minimum staff and maximum exposure.  \nThis paper presents an analysis of the strengths, weaknesses, opportunities and challenges of the CISO for a large state university that can provide insight into the larger problem faced by the private sector. The purpose is to illuminate the management issues facing the executive responsible for promoting the mission of the office—a mission to provide policy and guidance toward maintaining a secure computing environment. The purpose is also to provide a case study of a CISO exhibiting the qualities of security management gained through the strength of interpersonal networks, a case in evidence of the strength of weak ties.  \n1. Introduction  \nAn analysis of the CISO role begins with an acknowledgement of two major challenges. The first is that risk management as it pertains to computing and data is a moving target. There is a constant flow of new technologies, requirements and end-users into the University. This creates an environment that is impossible to secure from all present and future risks to information systems. Given this reality, the CISO’s objective is not to dictate initiatives to eliminate risk, but rather to provide information and support to assist executives within the University organizations to do their own risk management due diligence. Second, the Office does not have responsibility for the equipment or systems at risk, nor can it enforce its recommendations. It can only delegate and suggest better methods and procedures in the face of almost assured breach incidents of sensitive data and systems.  \nWhile strategic planning and analyses of strengths, weaknesses, opportunities, and threats (SWOT), are increasingly commonplace in the planning and budgeting of critical infrastructure systems, we present this case as one in perhaps a series for the purpose of developing discourse on the politics and economics of organizing to manage cybersecurity. That is, one can perform a SWOT analysis on a system, and one can perform a SWOT analysis of the organization charged with managing the system. We believe that many outstanding issues in cybersecurity exist because of under-analyzed, and coincidentally weak connections, between the political-economic dynamics of organizations responsible for technical systems.  \nThe following case illustrates relationships that capitalize on the strength of weak ties between a CISO and fellow administrators from disparate parts ofa large and technologically active public University.“The strength of weak ties” is a phrase coined by Mark Granovetter, in his article by the same name, published by the American Journal of Sociolo","cbCaipnzhMZSZXm1","https://ap.wps.com/l/cbCaipnzhMZSZXm1","pdf",1100376,"English","# Introduction\n## SWOT and strategic planning\n## Weak ties in CISO networks\n## Interview-based case analysis","[{\"question\":\"What major challenges define the CISO role in this paper?\",\"answer\":\"Risk management is a moving target due to continual technology and user changes. The CISO also lacks direct responsibility and enforcement power over the equipment or systems at risk, relying instead on delegation and recommendations.\"},{\"question\":\"How does the paper connect cybersecurity management with weak ties?\",\"answer\":\"It uses the concept of weak ties—ties that connect groups through non-hierarchical relationships—to explain how interpersonal networks between a CISO and administrators support security governance.\"},{\"question\":\"What method is used to analyze the CISO’s strengths and challenges?\",\"answer\":\"The paper reports findings from a series of six interviews with CISO stakeholders and applies the analysis steps outlined in Eugene Bardach’s eightfold policy analysis approach, framed through SWOT categories.\"}]","Strategic Communications Planning for a CISO: Strength in Weak Ties | PDF",1789336916]