Embed Size (px)
Citation preview
Security: Yes. Risk: Getting There. Breaches: Uh Oh. People: Aha!
PRESENTATION
Top 7 Issues for CISOs
Data Classification: SecureState Public
SPOTLIGHT ON THE PRESENTERS
2
Stephen MarchewitzPresidentSteve has more than 15 years of experience in multiple aspects of information systems, security, management, and risk advisory services.
Don MillerManager of Cyber Security & IT Compliance at FirstEnergyFulfilling the CISO role and building the security function from its infancy for over 10 years, Don has developed and implemented the enterprise cyber security, risk and compliance programs for First Energy. Don started his career at Bell Labs and was a Sr. Manager at both E&Y and Deloitte & Touche.
Data Classification: SecureState Public
AUDIENCE DEMOGRAPHICS
3
Pro-fes-
sional Ser-vices16%
Retail25%
Finance15%Tech-
nology6%
Manu-factur-
ing7%
Educa-tion13%
Healthcare18%
Industry
C-Suite17%
Manager30%
Director21%
Consul-tant23%
Other9%
Job functions
Data Classification: SecureState Public
SECURESTATE OVERVIEW
4
Management Consulting Firm Specializing in Information Security
Established in 2001
By identifying the problem in a causal relationship we can provide tactical and strategic recommendations to position our clients in achieving their SecureState.
Data Classification: SecureState Public
SECURESTATE PHILOSOPHY
5
Data Classification: SecureState Public
What are CISOs Saying?
6
Data Classification: SecureState Public
BACKGROUND
SecureState Research and Innovation Study
• Discussions with 20 CISOs • Interviews ended Q4 2013
• Questions such as:– What are your top issues?– What things have the greatest impact to your success? – What trends are you seeing or dealing with?
• Some responses were formal interviews, others were anecdotal or compiled from our assessments
7
Data Classification: SecureState Public
CISO ISSUE #1:MARKETING AND SELLING OF SECURITY
8
Data Classification: SecureState Public
CISO ISSUE #2:PRESENTING TO OTHER EXECUTIVES AND
THE BOARD
9
Data Classification: SecureState Public
CISO ISSUE #3:UNDERSTANDING (AND CONVEYING) HOW THE BUSINESS MAKES MONEY
10
Data Classification: SecureState Public
CISO ISSUE #4:SPEAKING IN BUSINESS LANGUAGE, NOT
TECHNICAL
11
Data Classification: SecureState Public
CISO ISSUE #5:HELPING THE CEO ‘WIN’
12
Data Classification: SecureState Public
CISO ISSUE #6:SECURING NEW TECHNOLOGY
13
Data Classification: SecureState Public
CISO ISSUE #7:STRATEGIC (RISK) MANAGEMENT
14
Data Classification: SecureState Public
“BONUS” CISO ISSUE #8:LOSING YOUR JOB AFTER A BREACH
15
Data Classification: SecureState Public
THANK YOU FOR YOUR TIME!
AQ&Q U E S T I O N
SA N S W E R S
Stephen [email protected]
