Search

This article offers the comments of experts regarding how the role of the chief information security officer (CISO) has changed over the past few years. The experts mentioned include Arthur Lessard, senior vice president and CISO for Universal Music Group; Charles Kolodgy, research vice president for security products at IDC, a global provider of market intelligence and advisory services, and Patricia Titus, vice president and CISO at U.S. government-sponsored enterprise Freddie Mac.

The article discusses how the chief information security officer (CISO) position has evolved from tactical operations to a more strategic company leadership role. According to the author, the expertise of the CISO tends to be weak in applications and even weaker in understanding the business processes those applications drive. He says that CISOs should reach out to new and natural allies within an organization and combine business understanding with technical knowledge.

The article focuses on the role of chief information security officer (CSO) to effectively communicate security needs to senior leaders. According to the "CISO Assessment 2012" conducted by IBM, almost 25% of security chiefs surveyed were shifting from a technology focus to a strategic business leadership role. It explains the reasons organizations have moved away from having the CISO reporting to the chief information office (CIO).

The article offers the author's insights on the need for organizations to change their information technology (IT) leadership strategy to address the leadership gap in the industry. Topics include the growth of IT leadership responsibilities, how to avoid conflict between the chief information security officer (CISO) and chief information officer (CIO) by discussing the role of CISO at the board level, and the potential benefits of cross-training the CIO and CISO.

The article looks at the skills needed by a chief information security officer (CISO) who wants to take corporate leadership roles. Topics covered include the increasing awareness of the importance of security to the company's overall welfare, the strategic, critical thinking and communications skills that CISOs must possess, and ways security professionals and companies can create new career-path model. It also cites the views of security officials including Blackstone CISO Jay Leek. INSET: CREATING VALUE: Rx for change.

The article discusses the prospects of the chief information security officer (CISO) and other C-level security careers. It note that there are indications that these positions may be dissolved as security functions embed deeper into other information technology (IT) and business operations. There are also observations that business acumen will be the key to maintaining CISO positions regardless of career path or market direction.

The article offers news briefs related to security industry. Topics include the employment of Chenxi Wang as chief strategy officer of Twistlock in San Francisco, California, the acquisition of cybersecurity firm Trustware by Singapore Telecommunication Ltd. (Singtel), and the fund raised by Alienvault, provider of unified security management and crowd-sourced threat intelligence, for its global sales and marketing programs.

The article cites the struggle of chief security officers (CSOs) for recognition, funding and resources in the information technology (IT) industry. It notes how security is low on an organization's chart with the role of security information officer seen not as a standardized profession. It cites the need for chief information security officers (CIO) to make people understand the risk of disasters and cyber attacks.

The article examines checklist security mentality of various players at the large enterprise level. Topics discussed include how chief executive officers (CEO) look at security, according to Doug Barbin, cybersecurity leader at the Shellman & Co. consulting firm, remarks from Malcolm Harkins, chief security and trust officer at security vendor Cymatic, and problems with risk strategies.

The article discusses the responsibility of chief privacy officers (CPO) to protect information assets from unauthorized access. Topics covered include data breaches at social network company Facebook and the U.S. Federal Emergency Management Agency (FEMA), the need for companies or organizations to define the role of a CPO, and the views of key industry executives such as Paul Iagnocco and Peter Lefkowitz regarding the skills needed for a CPO to function effectively.

The article presents the views of Gene Fredriksen, chief information security officer (CISO) at financial services firm PSCU, on computer security. Fredriksen believes that the focus of the computer security personnel has shifted from the mainframe to servers and other devices on complex networks. He says that the new modes of data breach are more sophisticated, more professional and better funded.

The article features Forrest Smith, chief information security officer (CISO) at automaker Nissan Americas. Topics discussed the benefit of establishing an internal marketing plan, the strategic vision generated by Smith for the company's security program and his role in improving threat intelligence levels and developing the idea of threat hunting. Also mentioned is the transfer of information technology (IT) security organization into corporate services.

The article offers tips for chief executive officers (CEO) to deal with cyber risks. Topics discussed include impact of cyber risk in business, need to plan awareness, responsibility and accountability for cybersecurity, need to improve communication and education in board of directors, and need to report technology problems to chief information officer.

The article focuses on threat hunter and a targeted group that can focus on a threat intelligence capability and threat intelligence seeks to leverage the organization's security and technology. It mentions cybersecurity controls are getting bypassed may contain a malicious link to download malware without the end-user's knowledge. It also mentions spending on security tools chief financial officers for more threat intelligence tools.

The article focuses on issues related to the role of the chief information security officer (CISO) in businesses in the U.S. in 2013. It states that the CISO position is considered to be an executive-level position. Topics discusses also include brand reputation, computer security, and the evolution of the CISO position.

A list of judges for the 2012 SC Awards U.S. is presented together with their photographs and company affiliations including co-chairs Illena Armstrong, Rich Baich, and Scott Sysol.

The article details the unique security challenges experienced by Sanjeev Sah as chief information security officer (CISO) of the University of North Carolina at Charlotte. In May 2012, the Social Security numbers of more than 300,000 students and faculty were made available on the Internet due to system misconfiguration and incorrect access settings. Breaches across higher education and the challenges of protecting the information technology (IT) systems of schools are highlighted.

The article focuses on the strategy being recommended by chief information security officer (CISO) Joel Yonts in responding to cyber attacks. It mentions the offense approach of Yonts, in which organizations can revenge against the hackers though driving the hacking costs or information sharing regarding the opponent. Meanwhile, it cites the five pillars adopted by Yonts for security management, including data definition, vulnerability reduction, and automated defense implementation.

The article features Scott Sysol, CUNA Mutual Group chief information security officer (CISO) and CSO of the Year awardee of the "SC Magazine." Company chief information officer (CIO) Rick Roy describes Sysol as someone with the depth and breadth of infrastructure and security knowledge. It notes that Sysol served a pivotal role in the collaboration with auditors. It also presents an interview with Sysol in which he discussed issues such as his achievements, his ideal hierarchical structure and the major challenges to IT security.

The article reports on the prevalence of Bring Your Own Device (BYOD) management practice by business enterprises in Great Britain in 2014. Topics discussed include the impact of BYOD on employees, the plans of businesses to offer mobile support to their staff, and the views of Norton Rose Fulbright global chief information security officer (CISO) Paul Swarbrick on technology. Also mentioned is the evaluation by information technology (IT) staff of BYOD management.

The article presents figures related to percentage of women workers in the information security industry as of 2018 including computer science jobs filled by women, women in Chief Information Security Officer roles (CISO), and women taking Advanced Placement tests.

The article offers the insights of several information technology (IT) experts regarding socially engineered phishing campaigns. Experts include chief information security officer (CISO) Michael Lamberg of software and services business OpenLink Financial, head of threat prevention marketing Andy Feit at security vendor Check Point Software Technologies, and chief technology officer (CTO) Vidur Apparao of email security vendor Agari.

The author reflects on the important role of a chief information security officer (CISO) in the security of business enterprises. She notes that a CISO is in charge of risk management and incident response plan. She attributes the decision of Sony to hire a CISO to multiple data breaches. Intel CISO Malcolm Harkins asserts that information security leaders can impede cybercrime groups.

An interview with several data security professionals in the U.S. in 2013 is presented including Netskope founder Sanjay Beri, Net Force executive director Joshua Chin, and Universal Music Group chief information security officer (CISO) Arthur Lessard. When asked about the threat vectors that seem to gain prominence in 2014, Beri mentioned insiders or employees doing malicious things inside the workplace. They talked about data security solutions and anti-virus tools.

The author reflects on the increasing number of cybersecurity threats and data breaches and the kind of chief information security officer (CISO) an organization needs to solve its security problem. Topics discussed include the misconceptions about security issues by some companies, the attributes a company needs to be able to protect its systems, and the responsibilities expected from CISOs.

Several letters to the editor in response to articles in previous issues are presented including "A Glass Cliff: Gender Gap," "Patient data at risk from missing unencrypted CD," and "Study: CISO Leadership Capacity Undervalued."

The article reports developments in corporate information security industry as of late 2014. According to research and technology firm NSS Labs' Vikram Phatak, the role of the chief security officer (CSO) has evolved from educating staff to advising top executives. Also cited are the 1994 book "Firewalls and Internet Security: Repelling the Wily Hacker," by William Cheswick, Steven Bellovin, and Aviel Rubin, and the comment by Bromium's Gaurav Banga on the developments.

The author comments on the tasks of chief information security officers (CISO) and the emerging field of information security. She notes that the moniker given such professionals can change from vertical market to vertical market or from company to company and, with it, the associated job description. She also cites CISOs' evolving role as the executives taking responsibility to account for risk across the entire organization and as online and cyber security pose clear and present danger.

The article discusses that ransomware attacks used to be fast, noisy and generic but now they are quiet and targeted. It mentions among the emerging advancements in ransomware is the use of command-and control bots, used to not only encrypt data, but also navigate through computer systems, steal credentials and gain access to system administrator accounts; and also mentions that attackers may be aided by binary approaches to authentication.

The article discusses how some organizations support inclusive strategies to hire more women in cybersecurity. Topics discussed include insight from Emily Mossburg, head of development of financial advisor Deloitte & Touche on how the company became a pioneer in recruiting women in cybersecurity. Lisa Boran, vehicle security manager at Ford Motor Company explains how the company's outreach events connect with women and minority students to encourage them to embark in cybersecurity careers.

The article focuses on the lack of skilled data security professionals to fill up positions by the human resource (HR) professionals. It discusses how companies are forced to take a proactive approach to fill with qualified job candidates due to the increase of Internet of Things (IoT) technology, how due to the high demand of cybersecurity professionals resulting in companies putting up cybersecurity training programs.

The article focuses on how using artificial intelligence (AI) for solving the problems related to cybersecurity. It discusses how cybersecurity tasks which are mundane could be eliminated by AI, how the mid-2018 Ponemon Institute Survey revealed the high speed of analyzing threats, AI's role of cyber labor saving.

The article discusses the benefits derived by companies which share cyber attack incidences such as prevention of attacks and strengthened security postures. Topics discussed include being an effective communicator by speaking the language of the other person such as the C-suite, the value of having a chief information security officer (CISO) in friendly terms with colleagues, and the risk of making the information public. Steps to open communications are also presented.

The article tips for chief information security officers (CISO) on how to address the board on issues relating to information security. Topics discussed include the importance of conveying a keen understanding that risks and threats are real, the need for the CISO to provide oversight for the development of a security, and the necessity of clearly communicating individual roles, responsibilities and authority to the board.

The article focuses on sharing private firms and government agencies realize the importance of creating a united front against cyberthreats. It mentions financial services industry has been able to quantify the effects of cyberintrusions and cyberattacks and physical and cybersecurity threats and vulnerabilities to help protect critical infrastructure. It also mentions U.S. Department of Justice (DOJ) has issued several opinions on anti-trust concerns should not prevent cyber threat sharing.

The article features several top security managers in the information and communications technology (ICT) industry as of 2014. Trustworthy Computing corporate vice president Scott Charney claimed that he was influenced by his father's job as systems administrator. Also featured are Ari Schwartz of the U.S. National Security Council, IBM's Kristin Lovejoy, and Yahoo's Alex Stamos.

The article explains the solution found by the team of University of Rochester Medical Center (URMC) chief information security officer (CISO) Michael Pinch in accommodating mobile devices to address security issues. Topics include the increasing use of bring-you-own-device (BYOD), Food and Drug Administration (FDA) regulations on medical devices and compliance to the Health Insurance Portability and Accountability Act (HIPAA). It also notes use of the ForeScout CounterACT technology.

The article offers the insights of chief information security officer (CISO) Amy Mushahwar on company data maps, attackers, and business security teams.

The author discusses the lessons he learned from his job as chief information security officer (CISO) for the New York City. He mentions the sources of threats facing the city's Web site and critical information infrastructure. He also offers tips for CISO and chief security officers on how to prepare their teams for the protection of their enterprises' big data.

The article presents the background of Stephen Scharf which has reportedly benefited him as a global chief information security officer (CISO), starting from a sales representative selling nesting software, to systems and network engineer and finally as first global CISO for Experian.

The article discusses the highlights of a government roundtable discussion organized by "SC Magazine" in 2009 in Washington, D.C. The main speaker for the event was Chief Information Security Officer (CISO) and U.S. Department of State deputy chief information officer, John Streufert. The session was attended by security leaders for the government sector who agreed that the 2002 Federal Information Security Management Act (FISMA) failed to address and improve the infrastructure of government network security.