The Top Responsibilities of a Chief Information Security Officer | Life of a CISO
Вставка
- Опубліковано 1 жов 2024
- On this episode of The Life of a CISO, Dr. Eric Cole discusses a common problem in businesses that a CISO has to solve: bridging the gap between executives and techies. Techies have a certain framework for understanding problems. Typically, they focus on systems. Systems don’t have feelings. It’s an intellectual exercise. With executives, they tend to be more emotional, because they are more attuned to the customers’ needs. The two don’t always speak in the same language, and they don’t follow the same basic premises to the same conclusions.
That’s where the CISO comes in. The CISO must be a translator, not just in terms of jargon but in terms of the intended message. In effect, the CISO is a marriage counselor between the two teams. With that in mind, the CISO must give directions in a framework that both teams can understand. The framework comes down to the following matrix: “What is the risk, what is the likelihood, what is the cost of a breach, what is the cost to fix it?” If the IT team can present these figures, then the CISO is doing his job well.
To hear more about the exciting life of a CISO, watch the full video.
🔑 [FREE MASTERCLASS]
Discover How You Can Advance Your Career Through Cybersecurity
safe.secure-an...
0:05 Intro
2:15 A CISO is a strategic position
3:00 A CISO is a translator.
5:10 No one likes your slide presentation
6:25 The risk of having a business person come in and be a CISO
7:02 The risk of having a security person come in and be a CISO
8:33 A CISO must be both a business and security person
11:33 What is the risk, what is the likelihood, what is the cost of a breach, what is the cost to fix it?
11:53 Don’t be so exact that you become your own worst enemy
14:20 Insurance: The industry of risk
17:03 In most industries, there are groups where competitors collaborate
19:00 Tricks of the trade: Rule of 3
23:38 Comparing health of a person to health of an organization
26:13 Practical application of the above points
29:00 Wrap up
About Dr Eric Cole
Eric Cole, PhD, is an industry-recognized security expert with over 20 years of hands-on experience in consulting, training, and public speaking. As the founder and CEO of Secure Anchor Consulting, Dr. Cole focuses on helping customers prevent security breaches, detect network intrusions, and respond to advanced threats. In addition, he is a sought-after expert witness and a 2014 inductee to the InfoSecurity Hall of Fame.
Follow me:
/ drericcole
/ drericcole
/ drericcole
www.secure-anc...
#LifeOfaCISO #CISO
One of your best talk. Even after 3 years of this video, this still makes me to learn. Thanks a lot
Can you please post model chart of this. It will be more helpful.
Insurance and Health example are awesome.
Hi Eric, I'm really grateful that I found this channel. It's my dream to be the Chief Information Security Advisor to the government of my country. The invaluable information you provide is definitely guiding me on the right path. If you publish a book I believe it would be a top seller.
This is great information. I’m very grateful for the knowledge you’re sharing here. I’m wanting to grow into the CISO level, and I know I’m weak on business.
Hi Dr,
Amazing video thanks ! Would be curious to see an example of this famous chart. Any link to provide ?
Thanks again !
Hi, Cedrick. Riley here from Dr. Cole's team! I will pass your request along to him. I'm sure he has a great example for you to look at. Thanks for the comment!
Words of gold Dr Cole. Awesome!
Good stuff! Thank you.
Love it!!!