How The Best CISOs Leverage People And Technology To Become Superstars
Help Net Security, Monday, July 31,2023
What separates superstar CISOs from the rest of the pack is that they are keenly aware of the burgeoning threat landscape and the cybersecurity skills shortage, but they don't give in to despair. Instead, they use their existing assets to great effect, including tapping into a hidden source of strength that is critically overlooked as a security resource: their development teams.
In the era of DevSecOps hype, it's common to say that security is everyone's responsibility. But there are limits to what untrained and unmotivated workers - especially those who don't work in IT - can do to make their organization more secure against cyberthreats.
For example, in the real world, travelers at a busy airport should feel responsible for reporting an unattended bag sitting alone in a suspicious location. However, they aren't trained to inspect that bag to look for threats or empowered to take any actions on their own. At a company, it's one thing to make everyone aware of cybersecurity, and another to educate them to make their organization more secure within the context of their role or to use the defensive tools they already have in place to counter threats and squash vulnerabilities.