Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Operations

12/8/2014
06:35 PM
Sara Peters
Sara Peters
Slideshows
Connect Directly
Twitter
RSS
E-Mail
100%
0%

How To Become a CISO: Top Tips

A look at the best career advice for aspiring CISOs from people who've reached the top.
Previous
1 of 10
Next

Over the past seven weeks, we've examined how to reach that lofty position of chief information security officer (CISO). We got a peek into what employers are looking for in a CISO from Mark Aiello,  president of the Boston cyber security staffing firm Cyber360 Solutions. We heard the professional origin stories of five CISOs: Jonathan Trull of Qualys, Quinn Shamblin of Boston University, Jennings Aske of Nuance Communications, Mark Potter of Danya International, and Janet Levesque of RSA.

We'll continue the conversation on the message boards here and on the next episode of Dark Reading Radio, Wednesday, Dec. 17, at 1:00 p.m. EST (10:00 a.m. PST). You'll have the opportunity to chat with some of our CISOs and pick the brain of Lee Kushner, president of LJ Kushner & Associates, who's been helping information security professionals get hired for years.

Until then, here are some of the key lessons we've learned so far.

 

Sara Peters is Senior Editor at Dark Reading and formerly the editor-in-chief of Enterprise Efficiency. Prior that she was senior editor for the Computer Security Institute, writing and speaking about virtualization, identity management, cybersecurity law, and a myriad ... View Full Bio

Previous
1 of 10
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
gudguy1
50%
50%
gudguy1,
User Rank: Strategist
1/2/2015 | 1:19:10 PM
Re: becoming a CISO
Yes indeed lqadishtu570, you got it. Multi-faceted / multi-dimensonal, which is what you do appear to be (not being facetious or snarky).

Many people just do not get it, they "have" to be or become broader in their outlooks in life AND at work.

Good comment.  Patrick
lqadishtu570
50%
50%
lqadishtu570,
User Rank: Apprentice
12/12/2014 | 3:15:21 PM
becoming a CISO
I am a True CISO who needs to be able to do so, more so Publically. I have been doing so using Face Book Postings, as well as in many talks with people concerning many issues, both Politically, Religionwise, and things that Affect us all on an almost daily basis. I am an excellent public speaker. I can speak both diplomatically and socially. Down to Earth Communication reaches out to many, and that is what is needed to reach out to more than what many see as over educated belligerance.
COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/14/2020
Omdia Research Launches Page on Dark Reading
Tim Wilson, Editor in Chief, Dark Reading 7/9/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-10287
PUBLISHED: 2020-07-15
The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default cre...
CVE-2020-10288
PUBLISHED: 2020-07-15
IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted.
CVE-2020-15780
PUBLISHED: 2020-07-15
An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.
CVE-2019-17639
PUBLISHED: 2020-07-15
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This...
CVE-2019-20908
PUBLISHED: 2020-07-15
An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.