Recommended
![The Value Of HISP Certification [Compatibility Mode]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
More Related Content
Similar to Group discussion summary cyber security leadership
Similar to Group discussion summary cyber security leadership (20)
Recently uploaded
Recently uploaded (20)
Group discussion summary cyber security leadership
- 1. July 16 | 2019 | Marriott Down Town at CFT Eaton Center, Ontario. CIO STRATEGY MEETING Digitize | Transform |Lead | Secure Group Discussion Summary Cyber Security Leadership Claude Sam-Foh Former Chief Enterprise Architect and Chief Cyber Security Officer Financial Services Commission of Ontario The discussion identified several traits that a CISO needs to have. The CISO a person is primarily a good communicator, a business focused attitude and at the same time to be tech savvy. The CISO must be a person who is forward thinking with a capacity to lead and has great insight. The person must be beach ready and be able to act and provide solutions to manage the threat landscape for the enterprise. To build and lead an effective team, the CISO needs to leverage first the existing resources within the enterprise. One can pick from the IT Team and Business team if necessary. If the budget permits, we can then hire externally. The group also discussed the importance of understanding the culture of the enterprise and the need to build integration among the different functions of the enterprise. The security cuts across the enterprise and security is the business for everyone. The need to have a good and sound governance to manage the different portfolios within the enterprise was also discussed. Summary of the Discussion Security is the business of everyone CISO is now getting the recognition to make a difference There is a lack of security professionals IT staff needs to be managed closer as they are in many cases the ones responsible for the vulnerabilities The importance of understanding the culture of the enterprise and the need to build integration among the different functions of the enterprise. The security cuts across the enterprise and security is the business for everyone.