Quick Hits
Commentary
Commentary
Commentary
Commentary
Commentary
News
NewsNews
NewsQuick Hits
CommentaryQuick HitsNewsNews
Commentary
Commentary
Couple of remarks. First, thanks for a nice piece on a REALLY important area. We're at the foot of a mountain relative to where we need to be on threat intel sharing. We need a lot more of it, although there's a...
In reply to: Nice piece, couple of remarks
For most organizations, risk translates into monetary loss in one form or another. It's not ideal in the human-world but in the corporate-world of lost revenues and liability lawsuits, money is a powerful measure for...
In reply to: Re: Reporting/communicating to whom?
"Current and future customer perception and loss"
I think this is where everything starts being problematic, no business without customers.
In reply to: customers
"the CISO should report outside of IT"
This sounds like a good idea to avoid conflict of interest.
In reply to: Re: Reporting/communicating to whom?
"to whom do you think the CISO should report"
The CFO? I would just avoid CISO reporting CFO. Security should not be all about money.
In reply to: Re: Reporting/communicating to whom?
"to whom do you think the CISO should report"
this is a good question, I personally would like to work for a company where this does not matter.
In reply to: Re: Reporting/communicating to whom?
One of the ways taking the risk to the executives is to provide examples, we can mention the companies hacked and fines they were charged. That would get their attention.
In reply to: Cyber-Risk
Really good question. I'm actually got a blog post coming out on the F5Labs site on that very subject in the next few weeks. Sneak preview: The CISO should report outside of IT and as close to the top as they can to increase...
In reply to: Re: Reporting/communicating to whom?
> our 2016 KPMG Consumer Loss Barometer. We found that consumers would be more loyal and more likely to do business with a companyCan you shed some light on the methodology here? Was customer loyalty measured objectively...
In reply to: Methodology?
Let me get this straight: Microsoft new about both tools and exploits but didn't patch them until now?
In reply to: Re: From here we got the news!
@Raymond, bearing these interests and issues in mind, to whom do you think the CISO should report in a typical organization so as to best give his/her office an appropriate platform, to be best understood, and to be best...
In reply to: Reporting/communicating to whom?
Latest Comment: just wondering...Thanx
Security Operations and IT Operations: Finding the Path to CollaborationA wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Tweet This
