A comprehensive library of executive publications for cybersecurity, privacy, compliance, resilience, and responsible AI leadership.
By Ken Williams, CISSP, CPP, CFE, MSc
20 volumes — available in paperback, hardcover, and Kindle
A comprehensive framework for building and governing enterprise-level information security programs. Covers governance structures, policy development, risk management, and program maturity models for healthcare organizations.
Operational guidance for running effective cybersecurity programs in complex healthcare environments. Includes SOC operations, incident detection, threat hunting, and operational metrics.
Practical frameworks for regulatory compliance, audit readiness, and security assurance programs. Covers HIPAA, HITECH, NIST, and healthcare-specific regulatory requirements.
Governance structures and accountability models for responsible AI adoption in healthcare security. Covers use case intake, vendor evaluation, human oversight, and AI risk management.
Essential tools, templates, and frameworks purpose-built for healthcare security professionals. A practical reference for CISOs, security managers, and compliance officers.
Applied threat modeling methodology for AI systems in healthcare environments and clinical workflows. Includes the Multidimensional Threat Modeling™ framework.
Executive leadership principles for building and sustaining resilient cybersecurity programs. Covers board communication, budget strategy, and organizational resilience.
End-to-end privacy program design and management for healthcare organizations. Covers HIPAA Privacy Rule, data governance, consent management, and privacy by design.
Structured incident response and crisis management playbooks for healthcare cyber events. Covers ransomware, data breaches, regulatory notification, and business continuity.
Vendor risk assessment, contract security requirements, and ongoing third-party monitoring frameworks for healthcare supply chains and business associates.
Security architecture principles and Zero Trust implementation guidance for healthcare networks, cloud environments, and clinical systems.
Communication frameworks and briefing templates for presenting cybersecurity risk, program status, and strategic priorities to boards and executive leadership.
Security program design for connected medical devices, IoMT, and clinical technology. Covers inventory, vulnerability management, and regulatory alignment.
Cloud security architecture, controls, and governance for healthcare workloads. Covers AWS, Azure, and GCP with HIPAA and HITRUST alignment.
Building a security-aware culture in healthcare organizations. Covers training program design, phishing simulation, metrics, and behavioral change management.
Ransomware prevention, detection, response, and recovery frameworks specifically designed for healthcare organizations and critical infrastructure.
Data classification, protection, and privacy controls for healthcare data assets. Covers data loss prevention, encryption, and data lifecycle management.
IAM program design and governance for healthcare organizations. Covers privileged access, MFA, SSO, and identity lifecycle management.
Quantitative risk analysis methods for healthcare cybersecurity programs. Covers FAIR methodology, risk scoring, and financial impact modeling for executive decision-making.
The definitive guide to delivering virtual CISO services. Covers engagement models, deliverables, client management, and building a vCISO practice.
All volumes are available on Amazon. Visit the author page to browse the complete collection.
