How To Fund Enterprise Cybersecurity: CISO Tips

How do you ensure funding for enterprise cybersecurity? Help C suite execs understand the true nature of cyberattacks.

Susan Nunziata, Editorial Director

March 3, 2014

1 Min Read

How do you get corporate funding for cybersecurity when it's so challenging to measure and report ROI to your C suite and board of directors?

This was one of the many topics discussed by chief information security officers on several panel sessions we attended last week at the RSA Conference in San Francisco.

During a session entitled "Aligning Cyber Security Personnel & Processes," Greg Schaffer, CISO of Circumference Group and a former Fidelity Investments CSO, summed up the dilemma this way: "The fact that you haven't had an incident is not an indication that you are secure. The fact that you have had an incident is not an indication that you're less secure."

How do you find the right metrics to report to your business-side executives? We can draw some lessons from the process outlined by Gary Gagnon, senior VP, CSO, and corporate director of cybersecurity for Mitre Corp. His team provides a monthly executive-level metric report featuring seven or eight briefing charts. He explained these charts and the information they show.

Read the rest of this article on Enterprise Efficiency.

Read more about:

2014

About the Author(s)

Susan Nunziata

Editorial Director

Susan Nunziata leads the site's content team and contributors to guide topics, direct strategies, and pursue new ideas, all in the interest of sharing practicable insights with our community.
Nunziata was most recently Director of Editorial for EnterpriseEfficiency.com, a UBM Tech community. Prior to joining UBM Tech, Nunziata was Editorial Director for the Ziff Davis Enterprise portfolio of Websites, which includes eWEEK, Baseline, and CIO Insight. From 2010-2012, she also served as Editor in Chief of CIO Insight. Prior to joining Ziff Davis Enterprise, she served as Editor in Chief of Mobile Enterprise from 2007 to 2010. A frequent public speaker, Nunziata has entertained audiences with compelling topics such as "Enterprise Mobility" and "The Multigenerational Workforce." She even managed to snag invitations to speak at the MIT Sloan CIO Symposium – not once, but twice (and those folks are smart). In a past life, she worked as a lead editor for entertainment and marketing publications, including Billboard, Music Business International, and Entertainment Marketing Letter.A native New Yorker, in August 2011 Nunziata inexplicably picked up stakes and relocated to the only place in the country with a higher cost of living: The San Francisco Bay Area. A telecommuter, her office mates are two dogs and two extremely well fed cats. She holds a Bachelor's degree in Journalism from St. John's University in Jamaica, N.Y. (and she doesn't even watch basketball).

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights