CISO December 27, 2017

Long Road Ahead or Unbridgeable Chasm? Lessons From the EY ‘Global Information Security Survey’

4 min read - The EY "Global Infomation Security Survey" revealed that CISOs and executives have a long road ahead when it comes to improving communication — but it is indeed a road, not an unbridgeable chasm.

Risk Management December 18, 2017

Understanding the COSO 2017 Enterprise Risk Management Framework, Part 2: Combining Apples With Oranges

3 min read - Organizations that follow both the COSO enterprise risk management framework and the NIST CSF can vastly improve their cyber risk oversight and management.

CISO December 15, 2017

Things to Consider When Calculating the Return on Security Investment

3 min read - The return on security investment is a crucial calculation to help CISOs demonstrate risks in business terms and gain executive buy-in for security tools.

Risk Management December 13, 2017

The Benefits of Operational Risk Management

2 min read - Operational risk management can help organizations measure the cost of network security solutions versus the cost of a potential data breach.

CISO December 7, 2017

What Does Secure Digital Transformation Mean to You?

2 min read - A secure digital transformation requires open lines of communication and collaboration between line of business executives and security leaders.

CISO November 21, 2017

Quit Your Day Job: Filling the Cybersecurity Skills Gap With Freelance Security Professionals

3 min read - Hiring freelancers can help companies close the cybersecurity skills gap, reduce overhead and infuse a fresh perspective into the organizational culture.

CISO November 20, 2017

Take a Load Off: Delegate Cyber Risk Management Using the Three Lines of Defense Model

4 min read - The Three Lines of Defense model enables board directors to be involved in the cyber risk management process without micromanaging the security team.

Data Protection November 13, 2017

The Emperor’s New Insider Threats

3 min read - The Emperor was the greatest CISO in the land. His castle was as safe as could be, and there were no insider threats to be found — or so he thought.

Risk Management November 2, 2017

What Can We Learn From the ‘Global State of Information Security Survey 2018’?

3 min read - While PwC's "Global State of Information Security Survey" noted that governments have improved cyber resilience, businesses still have a long way to go.

CISO October 30, 2017

Security Awareness Training Is a Team Effort

2 min read - To promote security awareness throughout the organization, CISOs should invite employees in disparate departments to help design training materials.