Less tech more talk the future of the ciso role

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Bill Brown
The Future of the CISO Role - RSA
February 2017
CIO and CISO
Veracode
PROF-W03

#RSAC
Poll Question:
Are you a CISO or top
Information Security
person?

#RSAC
More visible
No longer a back office technology expert
Accountable as an Innovator and StrategicBusiness leader
Must...

#RSAC
3 Simple Questions to ask Yourself
1. Am I helping to drive Innovation or
am I slowing it down?
3. Am I communicatin...

#RSAC
#1
Am I helping to drive
Innovation or am I
slowing it down?

#RSAC
InfoSec “grew up” as with a focus on Infrastructure security
Firewall Rules
Vulnerability Scanning
Application Secur...

#RSAC
…as well managing a backlog of Compliance and Customer Audits and
Questionnaires
“Aspirations or Attestations?”

#RSAC
…but Infrastructure is now Code

#RSAC
Security/GRC becomes the innovation "wet
blanket”

#RSAC
What is the effect on your speed of innovation?

#RSAC
The CISO remit must change

#RSAC
Security has its rightful place

#RSAC
So, what can you do?
13
Get InfoSec on the Scrum Teams
Secure application code, infrastructure AND environments from...

#RSAC
#2
Am I an “Enforcer” or
an “Enabler”?

#RSAC
CIOs AND employees now have a toolbox of
“purpose-built” SaaS tools architected and
designed with consumer-grade fea...

#RSAC
The widening perimeter of SaaS based tools in use
by employees is pushing CISOs into a position of
saying WAIT or NO...

#RSAC
… AND CISO’s have a role in creating business
value and employee enablement

#RSAC
So, what can you do?
monitor the perimeter for the use of these
cloud applications by your employees

#RSAC
…and
enable those applications that are enterprise
ready
they have a management console
user management via invitati...

#RSAC
…then
redirect users from the“unready” applications
to sanctioned ones,
block others

#RSAC
#3
Am I communicating
my security strategy
effectively to my
Executive team and
Board?

#RSAC
Worldview of the Board
What are their biggest fears?

#RSAC
80% of respondents discuss cybersecurity at most or all
boardroom meetings

#RSAC
More than 70% indicated they have significant concerns
about risk from third-party software

#RSAC
Meeting Board Expectations
Breach readiness and
breach response are hot
discussion topics
They want to know you
have...

#RSAC
Concepts to get across
There is no sure thing as a
breach-free organization
Cyber security is a company
wide respons...

#RSAC
What they want to know about
Breaches in similar industries
Key trends in successful attacks
Who is out to attack ou...

#RSAC
What you also want them to know
Describe top 5 cyber risks the company faces and
level of exposure to each
Let them ...

#RSAC
So, what can you do?
You will only get 5-15 minutes devoted to the cybersecurity topic
Prepare an appendix for anyth...

#RSAC
Use Benchmarks and Comparatives

#RSAC
Provide a Scorecard

#RSAC
So …Who are You?
1. Innovation Driver?
3. Communicator?
2. “Enabler”?

#RSAC
Key Takeaways
As the CISO, you need to embrace the role of driving innovation
Your company needs you to “enable” emp...

#RSAC
34
Next week you should:
See where your team is slowing engineering innovation
Assess your awareness of the use of c...

#RSAC
Thank You!
Q & A
bbrown@veracode.com
@BillBrownUSA

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 35 Ad

View on Slideshare

1 of 35 Ad