Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
CommentaryCommentaryCommentary
Commentary
CommentaryCommentary
Commentary
Commentary
Commentary
Commentary
While I agree having everyone accountable is an ideal situation I would still argue the importance of having clear leadership. We must have clear direction and motivation from leadership to be successful. That...
In reply to: Re: Compliance != Security
@Dr.T. At the end of the day, the shift has to come at the upper levels: That is the CEO and Board of Directors have to understand that strong security a critical cost of doing business without which the business will become...
In reply to: Re: Security as an Investment
It is because a more integrated world simply means more threats. Also we have been experiencing major breaches that touch consumers directly such as Target case.
In reply to: Re: if there's a silver lining...
That is one aspect of security we tend to get lost in my view. It does not really matter who needs to report where, it is actually everybody should be reporting to everyone by keeping everybody accountable on everything...
In reply to: Re: Compliance != Security
I agree with the article, we need to consider security as an investment. IT as a whole is always associated with the cost but without IT nothing can get done in today's world. The same for security, it may be way...
In reply to: Security as an Investment
In my opinion the ideal organization setup for a companies information security department would be setup this way. The CSO would report directly to the CEO and keep him well informed of the high level threats to the...
In reply to: Re: Compliance != Security
Good point, @Robert McDougal. So in our survey responses, I'm guessing the Org Chart 'checkbox' in this case might lead to Chief of risk / compliance.
In reply to: Re: Compliance != Security
I totally agree, @Robert. I found the comparison to epidemiology very original and apt with respect to cybersecurity. There has always been a lot of talk about proper security hygiene but using the public health model as...
In reply to: Re: Blueprint for fighting cyber infections
Not trying to put words in @chriscinfosec's mouth but in my experience sometimes regulations put executives into a check box mentallity. This means that they believe that if they do what the regulation says then they...
In reply to: Re: Compliance != Security
Not sure I get your point @chriscinfosec about the relevance (or irrelevance) of PCI-DSS and the reporting structure of the CSO. Can you elaborate?
In reply to: Re: Compliance != Security
Great Article! Our biggest problem in this fight is the uneducated user. To use a crude analogy, the user's we have today are by and large akin to the populace prior to germ theory. People don't understand proper digital...
In reply to: Re: Blueprint for fighting cyber infections
Tweet This
