Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Be a More Effective CISO by Aligning Security to the Business
Newest First  |  Oldest First  |  Threaded View
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/25/2017 | 8:35:24 PM
Understand the Business
I think understanding business is first critical step of securing the business. So the article is making a good point.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/25/2017 | 8:33:31 PM
Re: More Effective CISO
The guidance may be finessed however the CEO must set the policy. This makes sense. Sometime CEO may choose to have more open system than a lucked down environment
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/25/2017 | 8:30:55 PM
Re: More Effective CISO
Security priorities are different depending on where you sit in the C-Suite. This is a very good point. Some CEO would not care about security unless company get hit.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/25/2017 | 8:28:39 PM
Re: More Effective CISO
The concept of being more business minded is good but misses the mark I may agree with this. Business and security may not be aligned fully.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/25/2017 | 8:27:01 PM
Security and business
Security and business may not be aligned fully, sometime customers go with features that compromise security.
swdswan
50%
50%
swdswan,
User Rank: Apprentice
12/21/2017 | 1:50:10 PM
More Effective CISO
The concept of being more business minded is good but misses the mark. Security priorities are different depending on where you sit in the C-Suite. The CEO should have a perspective that spans the organization. They know what is critical to running the organization and what is the most important. That direction needs to be provided to the CSO/CISO. The guidance may be finessed however the CEO must set the policy. 

David Swan

 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
How Enterprises are Attacking the Cybersecurity Problem
Concerns over supply chain vulnerabilities and attack visibility drove some significant changes in enterprise cybersecurity strategies over the past year. Dark Reading's 2021 Strategic Security Survey showed that many organizations are staying the course regarding the use of a mix of attack prevention and threat detection technologies and practices for dealing with cyber threats.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-3903
PUBLISHED: 2021-10-27
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-41191
PUBLISHED: 2021-10-27
Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add `@require_apikey` in `BOT/lib/cogs/website....
CVE-2021-1115
PUBLISHED: 2021-10-27
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead to denial of service in a component beyond the vulnerable co...
CVE-2021-1116
PUBLISHED: 2021-10-27
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.
CVE-2021-1117
PUBLISHED: 2021-10-27
Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service.