Why CISOs Fail The Missing Link in Security Management and How to Fix It Barak Engel, 2018

1. Why CISOs Fail
The Missing Link in Security Management and How to Fix It
Barak Engel, 2018
Ramses R. S. Sidabutar
(23217074)

2. CISO
4/19/2018 2
understanding vulnerability
Potential Impact of Threat Intelligence on the Attack Life Cycle
Source: ISACA, Responding to Targeted Cyberattacks, 2013

3. We’re looking for a CISO
• Business partner to all departments
• Help the organization understand and manage underlying risks in
business operations
• Brand management, Service agreements
• Help uncover ways to promote the brand further by enhancing
consumer trust
• Engaging externally with the customer base
• The media on emerging issues like personal information privacy and
protability
4/19/2018 3
PROTECT THE COMPANY

4. The Dismal Discipline
• Management by compliance / security policy compliance
• Internal (understanding of people behavioral patterns) and
behavioral threats
4/19/2018 4

5. The CISO, Reimagined
• Security is about managing risk
• There is simply no way anyone can manage risk when they do no have
a finely tuned understanding of the sources of risk in their proper
business context
4/19/2018 5

6. Terima Kasih
4/19/2018 6