IANS Connector Event Deck: Factor 3
1 like187 views
IANS connector events gather senior-level information security professionals to engage in discussions on challenges and solutions within the field. These events emphasize the importance of integrating information security into business processes to avoid being sidelined in decision-making, especially for new software and vendor engagements. Participants share insights and strategies to improve risk assessment practices and overcome limitations in information security personnel.
IANS Connector Event Deck: Factor 3
- 2. See the Big Picture IANS Connector Events bring together small groups of senior-level information security professionals from a broad spectrum of industries and experiences for facilitated deep-dive discussions of important challenges and solutions in the information security space. Your community is a resource: through intimate peer-to- peer conversations around common issues, solutions, and suggestions for improvement, youโll gain insight into varying perspectives and develop new ideas to accelerate your problem-solving efforts.
- 3. How can you embed information security risk assessment into key processes? IANSโ research shows that CISOs and their teams typically donโt have a large role in enterprise risk decisions โ and when information security isnโt involved in decisions early on, the team is often forced to work much harder, but may achieve much less. How can you ensure that security is asked for input when your company deploys new software, commits to new vendors, launches new product initiatives, and considers mergers and acquisitions? At a recent event, we posed the question:
- 4. โCurrently security is an after thought - it is not incorporated up front in the business process. Security is perceived as a road block in most instances, also development teams seem to think they have security expertise within their group.โ โWe have an engagement process but there are other factors in the "way we approve" initiatives that sometimes leaves us in the dark.โ Attendees discussed the challenges โฆ โโฆ we have limited Infosec personnel to actively review for risk.โ
- 5. โฆ and through that discussion, shared thoughts on how to address the problem. โข Work with executive leaders to gain support for requiring risk evaluations for key projects. โข Establish agreements with Finance and Legal that compel assessment of new vendors before contracts โข If development is done in-house, institute app-level penetration testing, training for developers, and secure coding guidelines.
- 6. At at Connector Event, you will: โข Gain insight into the challenges and roadblocks you and your peers share. โข Learn about new and unique approaches to common issues and topics โข Take away problem-solving ideas that you can apply in your own organization.