Fight Fire with Fire

Introduction

RENEE TARUN

 

Digital transformation and the ever-changing threat landscape have significantly altered the role of chief information security officers (CISOs) and security decision-makers.

Traditional CISO responsibilities such as patch management and incident response are as critical as ever, but today's CISOs must also concern themselves with supply chain risks, myriad privacy regulations, and 5G. In addition to fighting traditional and emerging threats, CISOs also face the stress of the skills gap: not having enough people to do the job.

These challenges interwoven with network security are forcing CISOs to take a more holistic approach to balancing risk, security, and strategic business enablement.

Technology is not the only approach to solving the quagmire of security challenges we face. Security leaders must address people, processes, and technology, synthesizing them to create security solutions that manage risk while advancing business objectives at the speed of today's economy.

As CISOs, we must become fluent in the language of the business. We must influence others to change their mindsets, habits, and approaches to technology and behave in ways that maintain security. We need a cultural shift that enables everyone to adopt effective, ongoing processes to keep our organizations safe. Security must be embedded into vendor selection, employee onboarding, and product development. Security awareness training must be continuous to match the cadence of the ...