<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>HTB Blog</title>
    <link>https://www.hackthebox.com/blog</link>
    <description>All the latest news and insights about cybersecurity from Hack The Box. Hacking trends, insights, interviews, stories, and much more.</description>
    <language>en-us</language>
    <pubDate>Wed, 22 Jul 2026 19:04:25 GMT</pubDate>
    <dc:date>2026-07-22T19:04:25Z</dc:date>
    <dc:language>en-us</dc:language>
    <item>
      <title>Forrester Q4 2025 Cybersecurity Training Report – Key Trends &amp; Hack The Box Solutions</title>
      <link>https://www.hackthebox.com/blog/forrester-landscape-report-takeaways</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/forrester-landscape-report-takeaways" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/Eqo08K8YbLcnKu2SkNejxwwupyT9YbpV-1.jpg" alt="Forrester Q4 2025 Cybersecurity Training Report – Key Trends &amp;amp; Hack The Box Solutions" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsn"&gt;Key trends shaping cyber resilience in 2025&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispso"&gt;Hack The Box aligns with emerging cybersecurity trends&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsp"&gt;Hands-on, realistic environments&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsq"&gt;Upskilling in the AI-driven threat landscape&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsr"&gt;Cyber ranges for team readiness&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispss"&gt;How to secure investments in cyber resilience&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/forrester-landscape-report-takeaways" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/Eqo08K8YbLcnKu2SkNejxwwupyT9YbpV-1.jpg" alt="Forrester Q4 2025 Cybersecurity Training Report – Key Trends &amp;amp; Hack The Box Solutions" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsn"&gt;Key trends shaping cyber resilience in 2025&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispso"&gt;Hack The Box aligns with emerging cybersecurity trends&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsp"&gt;Hands-on, realistic environments&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsq"&gt;Upskilling in the AI-driven threat landscape&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispsr"&gt;Cyber ranges for team readiness&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1j7p0fispss"&gt;How to secure investments in cyber resilience&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fforrester-landscape-report-takeaways&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Fri, 17 Oct 2025 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/forrester-landscape-report-takeaways</guid>
      <dc:date>2025-10-17T04:00:00Z</dc:date>
      <dc:creator>b3rt0ll0</dc:creator>
    </item>
    <item>
      <title>Why security teams struggle to train—and how to fix it</title>
      <link>https://www.hackthebox.com/blog/why-security-teams-struggle-to-train-how-to-fix-it-skills-benchmarking</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/why-security-teams-struggle-to-train-how-to-fix-it-skills-benchmarking" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/cALBZVdcNPWNTk4Qiv25zFlZYg1fHFzZ-1.jpg" alt="Why security teams struggle to train—and how to fix it" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;p&gt;Imagine jumping into a ranked Call of Duty match with a team that never practices—no strategy, no skill-building, just instinct and luck. You &lt;em&gt;might&lt;/em&gt; win, but more often than not, you’d probably be left in the dust.&lt;/p&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/why-security-teams-struggle-to-train-how-to-fix-it-skills-benchmarking" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/cALBZVdcNPWNTk4Qiv25zFlZYg1fHFzZ-1.jpg" alt="Why security teams struggle to train—and how to fix it" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;p&gt;Imagine jumping into a ranked Call of Duty match with a team that never practices—no strategy, no skill-building, just instinct and luck. You &lt;em&gt;might&lt;/em&gt; win, but more often than not, you’d probably be left in the dust.&lt;/p&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fwhy-security-teams-struggle-to-train-how-to-fix-it-skills-benchmarking&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Wed, 26 Mar 2025 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/why-security-teams-struggle-to-train-how-to-fix-it-skills-benchmarking</guid>
      <dc:date>2025-03-26T04:00:00Z</dc:date>
      <dc:creator>diskordia, Josh Robison</dc:creator>
    </item>
    <item>
      <title>The big 6: essential financial regulations security leaders should know</title>
      <link>https://www.hackthebox.com/blog/cybersecurity-compliance-finance</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/cybersecurity-compliance-finance" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/Si3agEG3DR8FU3fU1SELlhCOTZIgHSHY-1.jpg" alt="The big 6: essential financial regulations security leaders should know" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ikckk23e3"&gt;6 key regulations and standards for the financial industry&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260811"&gt;Payment Card Industry Data Security Standard (PCI DSS)&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260812"&gt;Who has to comply with PCI-DSS requirements?&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260813"&gt;Cost of PCI DSS non-compliance&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260814"&gt;Where to start&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260815"&gt;General Data Protection Regulation (GDPR)&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260816"&gt;Sarbanes-Oxley Act (SOX)&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260817"&gt;Bank Secrecy Act (BSA) and anti-money laundering (AML) laws&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260818"&gt;Systems and Organization Controls 2 (SOC2)&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260819"&gt;SEC Rule&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ikckk23e4"&gt;Start with a single framework that maps to specific regulations&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ikckk23e5"&gt;Build, test, &amp;amp; improve security capabilities with HTB&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/cybersecurity-compliance-finance" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/Si3agEG3DR8FU3fU1SELlhCOTZIgHSHY-1.jpg" alt="The big 6: essential financial regulations security leaders should know" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ikckk23e3"&gt;6 key regulations and standards for the financial industry&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260811"&gt;Payment Card Industry Data Security Standard (PCI DSS)&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260812"&gt;Who has to comply with PCI-DSS requirements?&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260813"&gt;Cost of PCI DSS non-compliance&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260814"&gt;Where to start&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260815"&gt;General Data Protection Regulation (GDPR)&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260816"&gt;Sarbanes-Oxley Act (SOX)&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260817"&gt;Bank Secrecy Act (BSA) and anti-money laundering (AML) laws&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260818"&gt;Systems and Organization Controls 2 (SOC2)&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ik2j260819"&gt;SEC Rule&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ikckk23e4"&gt;Start with a single framework that maps to specific regulations&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1ikckk23e5"&gt;Build, test, &amp;amp; improve security capabilities with HTB&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fcybersecurity-compliance-finance&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Tue, 18 Feb 2025 05:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/cybersecurity-compliance-finance</guid>
      <dc:date>2025-02-18T05:00:00Z</dc:date>
      <dc:creator>Howard Poston</dc:creator>
    </item>
    <item>
      <title>How CISO roles have evolved with GRC</title>
      <link>https://www.hackthebox.com/blog/ciso-role-evolution</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/ciso-role-evolution" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/N9oLTxNgOhlLdjQgVxhdXndjVIbf89KK-1.jpg" alt="How CISO roles have evolved with GRC" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;p&gt;CISOs wear many hats, including managing the company’s cybersecurity-related Governance, Risk, and Compliance (GRC) program.&lt;/p&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/ciso-role-evolution" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/N9oLTxNgOhlLdjQgVxhdXndjVIbf89KK-1.jpg" alt="How CISO roles have evolved with GRC" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;p&gt;CISOs wear many hats, including managing the company’s cybersecurity-related Governance, Risk, and Compliance (GRC) program.&lt;/p&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fciso-role-evolution&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Wed, 24 Jul 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/ciso-role-evolution</guid>
      <dc:date>2024-07-24T04:00:00Z</dc:date>
      <dc:creator>Howard Poston</dc:creator>
    </item>
    <item>
      <title>How a technical pro can become a CISO (Chief Information Security Officer)</title>
      <link>https://www.hackthebox.com/blog/how-to-become-a-ciso</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/how-to-become-a-ciso" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/Afx9HBy8TAl3sTVxKAnvUgpLTLomx6jG-1.jpg" alt="How a technical pro can become a CISO (Chief Information Security Officer)" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03s"&gt;Translate technical jargon into board-level language&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03t"&gt;Take on more responsibility to gain exposure&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03u"&gt;Cut your teeth with risk management&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03v"&gt;From AI to OT: Current challenges CISOs face&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i040"&gt;AI&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i041"&gt;Emerging technologies&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i042"&gt;Operational technology (OT)&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i043"&gt;HTB resources for senior cybersecurity professionals&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/how-to-become-a-ciso" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/Afx9HBy8TAl3sTVxKAnvUgpLTLomx6jG-1.jpg" alt="How a technical pro can become a CISO (Chief Information Security Officer)" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03s"&gt;Translate technical jargon into board-level language&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03t"&gt;Take on more responsibility to gain exposure&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03u"&gt;Cut your teeth with risk management&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i03v"&gt;From AI to OT: Current challenges CISOs face&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i040"&gt;AI&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i041"&gt;Emerging technologies&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i042"&gt;Operational technology (OT)&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1i1puv3i043"&gt;HTB resources for senior cybersecurity professionals&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fhow-to-become-a-ciso&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Tue, 07 May 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/how-to-become-a-ciso</guid>
      <dc:date>2024-05-07T04:00:00Z</dc:date>
      <dc:creator>fileake</dc:creator>
    </item>
    <item>
      <title>CISOs: Win your “board's blessing” with this reporting template</title>
      <link>https://www.hackthebox.com/blog/ciso-board-reporting-template</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/ciso-board-reporting-template" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/pCpaQvqTK8Z2K3SVvJsyvuDhR4mC1B7N-1.jpg" alt="CISOs: Win your “board's blessing” with this reporting template" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ghvsu1jkb9"&gt;Sample CISO board report template &#x1f447;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv41u"&gt;CISOs face job loss &amp;amp; jail time for poor reporting&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv41v"&gt;The role of the board vs. the CISO&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv420"&gt;What should a CISO board report cover?&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv421"&gt;What (even smart) CISOs get wrong with board reporting&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv422"&gt;CISO cybersecurity reporting best practices&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv423"&gt;1. Avoid the technicalities&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv424"&gt;2. Focus on the right metrics&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv425"&gt;3. Give enough context&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv426"&gt;4. Come prepared with solutions&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv427"&gt;5. Prove the ROI of cybersecurity by embracing the power of “I told you so”&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv428"&gt;The power of CISO board reports&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/ciso-board-reporting-template" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/pCpaQvqTK8Z2K3SVvJsyvuDhR4mC1B7N-1.jpg" alt="CISOs: Win your “board's blessing” with this reporting template" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ghvsu1jkb9"&gt;Sample CISO board report template &#x1f447;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv41u"&gt;CISOs face job loss &amp;amp; jail time for poor reporting&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv41v"&gt;The role of the board vs. the CISO&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv420"&gt;What should a CISO board report cover?&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv421"&gt;What (even smart) CISOs get wrong with board reporting&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv422"&gt;CISO cybersecurity reporting best practices&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv423"&gt;1. Avoid the technicalities&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv424"&gt;2. Focus on the right metrics&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv425"&gt;3. Give enough context&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv426"&gt;4. Come prepared with solutions&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv427"&gt;5. Prove the ROI of cybersecurity by embracing the power of “I told you so”&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hsnacjv428"&gt;The power of CISO board reports&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fciso-board-reporting-template&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Mon, 29 Apr 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/ciso-board-reporting-template</guid>
      <dc:date>2024-04-29T04:00:00Z</dc:date>
      <dc:creator>Mags22</dc:creator>
    </item>
    <item>
      <title>How to connect cybersecurity learning outcomes to company goals</title>
      <link>https://www.hackthebox.com/blog/how-to-connect-cybersecurity-learning-outcomes-to-company-goals</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/how-to-connect-cybersecurity-learning-outcomes-to-company-goals" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/PTsFW554QALuz0AekQts8KY8SNr2WxLV-1.jpg" alt="How to connect cybersecurity learning outcomes to company goals" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q11"&gt;Why do cybersecurity teams need to align with organizational goals?&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q12"&gt;How to align cybersecurity upskilling with company goals&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q13"&gt;1. Understand business objectives and assess the risks&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q14"&gt;2. What are the company’s crown jewels?&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q15"&gt;3. What risk scenarios can we expect to face?&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q16"&gt;4. Compliance and regulatory requirements&lt;/a&gt; 
     &lt;ul&gt; 
      &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q17"&gt;Direct influence of upskilling on compliance&lt;/a&gt;&lt;/li&gt; 
      &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q18"&gt;Indirect influence of upskilling on compliance&lt;/a&gt;&lt;/li&gt; 
      &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q19"&gt;Practical application&lt;/a&gt;&lt;/li&gt; 
     &lt;/ul&gt; &lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q1a"&gt;5. Learn how to communicate these goals with the board of directors&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q1b"&gt;Plan upskilling according to business objectives&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/how-to-connect-cybersecurity-learning-outcomes-to-company-goals" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/PTsFW554QALuz0AekQts8KY8SNr2WxLV-1.jpg" alt="How to connect cybersecurity learning outcomes to company goals" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q11"&gt;Why do cybersecurity teams need to align with organizational goals?&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q12"&gt;How to align cybersecurity upskilling with company goals&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q13"&gt;1. Understand business objectives and assess the risks&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q14"&gt;2. What are the company’s crown jewels?&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q15"&gt;3. What risk scenarios can we expect to face?&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q16"&gt;4. Compliance and regulatory requirements&lt;/a&gt; 
     &lt;ul&gt; 
      &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q17"&gt;Direct influence of upskilling on compliance&lt;/a&gt;&lt;/li&gt; 
      &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q18"&gt;Indirect influence of upskilling on compliance&lt;/a&gt;&lt;/li&gt; 
      &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q19"&gt;Practical application&lt;/a&gt;&lt;/li&gt; 
     &lt;/ul&gt; &lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q1a"&gt;5. Learn how to communicate these goals with the board of directors&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hrlntd1q1b"&gt;Plan upskilling according to business objectives&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fhow-to-connect-cybersecurity-learning-outcomes-to-company-goals&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Wed, 17 Apr 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/how-to-connect-cybersecurity-learning-outcomes-to-company-goals</guid>
      <dc:date>2024-04-17T04:00:00Z</dc:date>
      <dc:creator>Mags22</dc:creator>
    </item>
    <item>
      <title>5 steps to implement cybersecurity reskilling (&amp; close talent gaps)</title>
      <link>https://www.hackthebox.com/blog/5-step-cybersecurity-reskilling-guide</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/5-step-cybersecurity-reskilling-guide" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/N3JFtqCFi9biVeqJqvvRrEEnUysgCZ0P-1.jpg" alt="5 steps to implement cybersecurity reskilling (&amp;amp; close talent gaps)" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid6"&gt;Upskilling vs. reskilling: what’s the difference?&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid7"&gt;Upskilling = linear career progression&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid8"&gt;Reskilling = lateral movement to new roles&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid9"&gt;The benefits of reskilling&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooida"&gt;5 steps to reskill teams into cybersecurity roles&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidb"&gt;1. Skills forecasting&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidc"&gt;2. Identify existing talent&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidd"&gt;3. Promote a culture of reskilling&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooide"&gt;4. Develop new career pathways&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidf"&gt;5. Provide mentorship programs&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidg"&gt;Reskill for the future of cybersecurity&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/5-step-cybersecurity-reskilling-guide" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/N3JFtqCFi9biVeqJqvvRrEEnUysgCZ0P-1.jpg" alt="5 steps to implement cybersecurity reskilling (&amp;amp; close talent gaps)" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid6"&gt;Upskilling vs. reskilling: what’s the difference?&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid7"&gt;Upskilling = linear career progression&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid8"&gt;Reskilling = lateral movement to new roles&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooid9"&gt;The benefits of reskilling&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooida"&gt;5 steps to reskill teams into cybersecurity roles&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidb"&gt;1. Skills forecasting&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidc"&gt;2. Identify existing talent&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidd"&gt;3. Promote a culture of reskilling&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooide"&gt;4. Develop new career pathways&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidf"&gt;5. Provide mentorship programs&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hq05v9ooidg"&gt;Reskill for the future of cybersecurity&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2F5-step-cybersecurity-reskilling-guide&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Wed, 27 Mar 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/5-step-cybersecurity-reskilling-guide</guid>
      <dc:date>2024-03-27T04:00:00Z</dc:date>
      <dc:creator>Mags22</dc:creator>
    </item>
    <item>
      <title>How CISOs can drive a security culture change</title>
      <link>https://www.hackthebox.com/blog/how-cisos-can-drive-a-security-culture-change</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/how-cisos-can-drive-a-security-culture-change" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/jv5UETd6QxEg90cYEdvLw2SebZc5NXyT-1.jpg" alt="How CISOs can drive a security culture change" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51hd"&gt;Speak the board’s language&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51he"&gt;Make cybersecurity awareness training compulsory&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51hf"&gt;Justify the extra investment&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51hg"&gt;Entering a new era of cybersecurity&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/how-cisos-can-drive-a-security-culture-change" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/jv5UETd6QxEg90cYEdvLw2SebZc5NXyT-1.jpg" alt="How CISOs can drive a security culture change" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51hd"&gt;Speak the board’s language&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51he"&gt;Make cybersecurity awareness training compulsory&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51hf"&gt;Justify the extra investment&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1ho9sn0v51hg"&gt;Entering a new era of cybersecurity&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2Fhow-cisos-can-drive-a-security-culture-change&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Thu, 21 Mar 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/how-cisos-can-drive-a-security-culture-change</guid>
      <dc:date>2024-03-21T04:00:00Z</dc:date>
      <dc:creator>Mags22</dc:creator>
    </item>
    <item>
      <title>8 metrics to track cybersecurity performance</title>
      <link>https://www.hackthebox.com/blog/8-metrics-to-track-cybersecurity-performance</link>
      <description>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/8-metrics-to-track-cybersecurity-performance" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/6iEpM4PP4nxJV76inGUEmfBVJGf7FGCY-1.jpg" alt="8 metrics to track cybersecurity performance" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi269"&gt;Why tracking cyber performance is important&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26a"&gt;How to track security posture&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26b"&gt;Preparedness&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26c"&gt;Security incidents&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26d"&gt;Cost per incident&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26e"&gt;Time to detection and mitigation&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26f"&gt;How to track cybersecurity performance&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26g"&gt;1. Metrics to optimize upskilling&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26h"&gt;2. Measure the impact of cyber performance&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26i"&gt;3. Track career development&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26j"&gt;4. Employee engagement and retention&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26k"&gt;Prove that cybersecurity workforce development works&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;</description>
      <content:encoded>&lt;div class="hs-featured-image-wrapper"&gt; 
 &lt;a href="https://www.hackthebox.com/blog/8-metrics-to-track-cybersecurity-performance" title="" class="hs-featured-image-link"&gt; &lt;img src="https://www.hackthebox.com/hubfs/Imported_Blog_Media/6iEpM4PP4nxJV76inGUEmfBVJGf7FGCY-1.jpg" alt="8 metrics to track cybersecurity performance" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"&gt; &lt;/a&gt; 
&lt;/div&gt; 
&lt;div class="mce-toc"&gt; 
 &lt;h4&gt;Table of Contents&lt;/h4&gt; 
 &lt;ul&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi269"&gt;Why tracking cyber performance is important&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26a"&gt;How to track security posture&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26b"&gt;Preparedness&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26c"&gt;Security incidents&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26d"&gt;Cost per incident&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26e"&gt;Time to detection and mitigation&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26f"&gt;How to track cybersecurity performance&lt;/a&gt; 
   &lt;ul&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26g"&gt;1. Metrics to optimize upskilling&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26h"&gt;2. Measure the impact of cyber performance&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26i"&gt;3. Track career development&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
    &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26j"&gt;4. Employee engagement and retention&amp;nbsp;&lt;/a&gt;&lt;/li&gt; 
   &lt;/ul&gt; &lt;/li&gt; 
  &lt;li&gt;&lt;a href="#mcetoc_1hou9ptgi26k"&gt;Prove that cybersecurity workforce development works&lt;/a&gt;&lt;/li&gt; 
 &lt;/ul&gt; 
&lt;/div&gt;  
&lt;img src="https://track.hubspot.com/__ptq.gif?a=5514032&amp;amp;k=14&amp;amp;r=https%3A%2F%2Fwww.hackthebox.com%2Fblog%2F8-metrics-to-track-cybersecurity-performance&amp;amp;bu=https%253A%252F%252Fwww.hackthebox.com%252Fblog&amp;amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "&gt;</content:encoded>
      <category>CISO Diaries</category>
      <pubDate>Thu, 14 Mar 2024 04:00:00 GMT</pubDate>
      <guid>https://www.hackthebox.com/blog/8-metrics-to-track-cybersecurity-performance</guid>
      <dc:date>2024-03-14T04:00:00Z</dc:date>
      <dc:creator>Mags22</dc:creator>
    </item>
  </channel>
</rss>
