Chapter 10Check Yourself
“From a risk perspective, we had to shift from a castle and moat model of security to embedding our security expertise and leadership into the business. Not to be the officer of security in these emerging businesses, but to be the partner.”
—Rob Duhart, CISO Oracle Cloud Infrastructure
Gates or guardrails? Guardrails set up boundaries to allow autonomy. They minimize risk without introducing excessive bureaucracy. On the other hand, gates block progress until approval. As transformation scales, gates will be inevitable, so everyone should be ready for them including how to avoid them through developing guardrails. One of the most common mistakes we see organizations make is easy to avoid but is often the result of a desire to work as fast as possible. It is simply not having the right folks in the transformation conversations addressing concerns and issues at the start of the journey. We’ve all heard the tech industry mantra “Move fast and break things.” The thinking might be right, but you still need to be realistic. Ask yourself: Have you thought through all the potential risks associated with transformation? Is compliance adequately represented in your efforts? Have you given attention to how vulnerabilities might be created through improper use of applications, processes, and services? Governance, risk, and compliance (GRC) is fundamental to ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access