Show Notes
Senior management's awareness of information security and cyber threats is essential if security teams are to effectively mitigate against them. Unfortunately, over time as cybersecurity has shifted from a technical position to a risk management position, senior management's perception has not moved with it. Still seeing cybersecurity as a technical function focused around IT controls and technology, they do not consider it a part of risk and a critical component to business success.
Is it a leadership issue? Or an awareness issue? And whose responsibility is it to change their perception of cybersecurity for the better?
In the third episode of the ‘Cyber Risk Fundamentals’ series, Nick Frost is joined by Todd Wade and Andrew Wilson to explore what is now the biggest challenge for CISOs. Together they discuss: - Why the CISO must now take an influencer role - How to position and communicate cybersecurity to senior management - Why aligning cybersecurity goals to business goals could be key to changing senior managements view on security - Why the CISO needs to build champions within the organisation
More from Cyber Risk Fundamentals
How to Fast-Track Your Cybersecurity Journey with a No-Nonsense Gap Assessment by CRMG
The emergence and rapid growth of online retail is a great example of how businesses can move most of their operations online. Even businesses that don’t sell their products or services online are now benefiting from increased customer engagement and interaction from using digital platforms. However, while moving online has many benefits and opportunities to scale, it also creates many vulnerabilities and opportunities for cybercriminals.
The pace and scale at which we create and share data is greater than ever before. With such an abundance of information, data ownership is a real challenge for organisations, with many finding it too difficult to determine the data they own, and who is responsible for what. Once organisations assign data owners who understand what they are accountable for, how to manage risk to their data, and buy-in to the responsibility of being an owner, they can truly be an asset to the business - and a critical step in cybersecurity. In this podcast, Nick Frost, Co-Founder & Director at CRMG and Simon Lacey, Principal Consultant at CRMG, discuss why organisations that define data owners will be in a stronger position with their information security than those that don’t. Nick and Simon also share examples of how to identify and assign data owners, and how to get buy-in from the people who own data, and essentially the risk.
The pace and scale at which we create and share data is greater than ever before. With such abundance of information, data ownership is a real challenge for organisations, with many finding it too difficult to determine the data they own, and who is responsible for what.
Since the outbreak of COVID-19, there has been a period of major transition and organisations have had to quickly adapt to weather the storm. Many businesses have managed to remain operational but with all-new working processes. Organisations have adopted enterprise-wide remote working which likely required the rapid adoption of technology and a much greater reliance on existing or new digital infrastructure.