The CISO Toolkit is designed as a toolkit for the Chief Information Security Officer (CISO) of a substantial enterprise. This is "Security Decisions", a decision support tool for the CISO that actualizes many of the notions underlying the Toolkit in a standard form that allows specific decisions to be made quickly and with a solid basis. Each decision is done in two pages, making these articles ideal for executive decision-making and presentation to top decision makers. These articles are also commonly used to explain decisions, as leverage when a decision without a sound basis comes to the CISO, and as a means to explore other options when a decision has been made without adequate consideration. At the end there is a section for writing down the current situation and the decisions made for the desired situation relating to every issue identified ion the book.