The document describes IANS Connector Events which bring together senior information security professionals from different industries to discuss important challenges and solutions in information security. At a recent event, attendees discussed how business leaders often view information security risks separately from other business risks and do not understand its importance. Suggestions to address this included tying business leaders' compensation to security risk mitigation, publishing security compliance metrics to create competition, and mandating security training for business leaders. The events are meant to provide insights into shared challenges and new approaches through facilitated peer discussions.

1. Connector Events

2. See the Big Picture
IANS Connector Events bring together small groups of
senior-level information security professionals from a
broad spectrum of industries and experiences for
facilitated deep-dive discussions of important challenges
and solutions in the information security space.
Your community is a resource: through intimate peer-to-
peer conversations around common issues, solutions,
and suggestions for improvement, you’ll gain insight into
varying perspectives and develop new ideas to accelerate
your problem-solving efforts.

3. Most business leaders view information
security risk as separate from business
risk. Why? And how can we change this?
IANS’ research into CISO Impact shows that business
leaders often view information security risk as separate
from other classes of risk they manage. As a result,
security teams are chronically under-resourced and
under-appreciated. How can we shift the way that
business leaders think and operate?
At a recent event, we posed the question:

4. “There is still a slight
disconnect between the
P&L owners recognizing
their risks and being able
to afford the smart and
necessary remediations.”
“…systematic
meetings do not
take place.”
Attendees discussed the challenges …
“Current executive
team… does not fully
understand the
importance of managing
business risk as it relates
to security threats”

5. … and through that discussion, shared
thoughts on how to address the problem.
• Work with C-Level Executives to tie business
leaders’ compensation to ameliorating security risks.
• Create competition among business leaders by
implementing and publishing ‘wall of shame’ metrics
for information security compliance.
• Establish formal information security training,
mandatory for all business leaders and their reports,
with completion tracked and visible to leadership.

6. At at Connector
Event, you will:
• Gain insight into the challenges and roadblocks
you and your peers share.
• Learn about new and unique approaches to
common issues and topics
• Take away problem-solving ideas that you can
apply in your own organization.