IANS Connector Event Deck: Factor 2
1 like156 views
The document describes IANS Connector Events which bring together senior information security professionals from different industries to discuss important challenges and solutions in information security. At a recent event, attendees discussed how business leaders often view information security risks separately from other business risks and do not understand its importance. Suggestions to address this included tying business leaders' compensation to security risk mitigation, publishing security compliance metrics to create competition, and mandating security training for business leaders. The events are meant to provide insights into shared challenges and new approaches through facilitated peer discussions.
IANS Connector Event Deck: Factor 2
- 2. See the Big Picture IANS Connector Events bring together small groups of senior-level information security professionals from a broad spectrum of industries and experiences for facilitated deep-dive discussions of important challenges and solutions in the information security space. Your community is a resource: through intimate peer-to- peer conversations around common issues, solutions, and suggestions for improvement, you’ll gain insight into varying perspectives and develop new ideas to accelerate your problem-solving efforts.
- 3. Most business leaders view information security risk as separate from business risk. Why? And how can we change this? IANS’ research into CISO Impact shows that business leaders often view information security risk as separate from other classes of risk they manage. As a result, security teams are chronically under-resourced and under-appreciated. How can we shift the way that business leaders think and operate? At a recent event, we posed the question:
- 4. “There is still a slight disconnect between the P&L owners recognizing their risks and being able to afford the smart and necessary remediations.” “…systematic meetings do not take place.” Attendees discussed the challenges … “Current executive team… does not fully understand the importance of managing business risk as it relates to security threats”
- 5. … and through that discussion, shared thoughts on how to address the problem. • Work with C-Level Executives to tie business leaders’ compensation to ameliorating security risks. • Create competition among business leaders by implementing and publishing ‘wall of shame’ metrics for information security compliance. • Establish formal information security training, mandatory for all business leaders and their reports, with completion tracked and visible to leadership.
- 6. At at Connector Event, you will: • Gain insight into the challenges and roadblocks you and your peers share. • Learn about new and unique approaches to common issues and topics • Take away problem-solving ideas that you can apply in your own organization.