In the rapidly changing world of cybersecurity, technical acumen is often viewed as the most essential skill for cybersecurity leaders. However, there's an often-underestimated skill that can significantly elevate a cybersecurity leader's influence and impact: writing.
Cyber leaders deal with hundreds of competing priorities each day. Writing is a great tool for refining, organizing, and developing your thoughts. If thinking is like a muscle, then writing is a great way to train it. Clear writing reflects clear thinking and helps a CISO in many ways:
Articulating the complex. Our field is inherently complex, tying elaborate technologies, evolving threats, convoluted regulatory requirements, and dynamic business strategies. The ability to translate this complexity into clear, concise language is an art and is paramount to success. I firmly believe a cybersecurity leader must be part evangelist - able to communicate effectively with a diverse audience that includes the board and C-suite executives who need the big picture, technical teams who require detailed instructions, and end-users who need understandable guidance.
Building trust and credibility. Well-articulated communication builds trust and credibility. When a cybersecurity leader can clearly explain the risks, the solutions, and the rationale behind their decisions without relying on FUD, they foster confidence. This trust is essential for securing buy-in for the cybersecurity program, which requires significant investments and organizational commitment.
Influencing and persuading. Influence and persuasion are key. A cybersecurity leader needs to be able to advocate for cybersecurity investments, convince stakeholders of the necessity of security measures, and inspire their teams to make security part of their day-to-day work. Strong writing skills enable you to create compelling arguments, proposals, and presentations that achieve these goals.
Thought leadership. The ability to share insights, predictions, and best practices – is critical for staying ahead of the curve. Writing blog posts, articles, white papers, and even books allows cybersecurity leaders to establish themselves as experts, share their knowledge with the wider community, and advance the ongoing conversation about cybersecurity.
Career advancement. Effective communication can set a cybersecurity professional apart and open doors to new opportunities - significantly boosting a security leader's career trajectory.
As an agriculture major, perhaps writing was a compensator for my lack of technical training, but the opposite is also true – many top technologists struggle to write. The good news is writing skills can be developed. Here are some practical tips for cybersecurity leaders:
Read: Reading the work of other cybersecurity leaders, as well as writers in other fields, can help you develop your own style and expand your vocabulary.
Tell a story: People connect with stories. Use anecdotes, examples, and metaphors to bring your writing to life and make it more engaging.
Practice: Like any skill, writing improves with practice. Set aside time to write, whether it's a blog post, an email, or even just a journal entry.
Embrace simplicity: Avoid jargon and technical terms whenever possible. Strive for clear, straightforward language that is easily understood by a broad audience. A concise writer is a good writer.
Use humor when appropriate: For some reason, people don’t expect security leaders to have a sense of humor. I can’t imagine why. However, this makes humor a surprise that catches your audience off-guard and grabs attention.
Seek feedback: Don't be afraid to ask for feedback on your writing and be willing to embrace criticism. Peers, mentors, or even professional editors can provide valuable insights on how to improve your clarity, conciseness, and overall effectiveness.
Cybersecurity leaders need to seek every edge available. Effective communication is not a luxury - it's a necessity. Invest in developing your writing skills and you will benefit in terms of influence, impact, and career success.
Hold Fast and Stay True!