Search

Your search keyword '"CISO"' showing total 5,859 results
Start Over "CISO" Search Limiters Full Text
5,859 results on '"CISO"'

1. CISO Soft Skills.

Author

Collette, Ron, Gentile, Mike, and Gentile, Skye

Subjects
Computer security, Data protection
Abstract

Summary: As organizations struggle to implement effective security measures, all too often they focus solely on the tangible elements, such as developing security policies or risk management implementations. While these items are very important, they are only half of the equation necessary to ensure security success. CISO Soft Skills: Securing Organizations

Published
2008

2. Teacher, enforcer, soothsayer, scapegoat : the purpose of the CISO in commercial organisations

Author

Da Silva, Joseph

Subjects
CISO, Cyber security, Interpretive research, Business and Society
Abstract

The employment of a Chief Information Security Officer (CISO) is common in commercial businesses. However, the purpose of the CISO role is not well understood. This thesis provides in-depth perspectives on the CISO role, and, in so doing, brings to the fore a nuanced understanding of its purpose and surfaces the experiences of those performing it. The thesis is grounded in an in-depth study of 18 UK-based but predominantly multinational organisations. It utilises semi-structured interviews with 15 CISOs and six senior organisational leaders, as well as an analysis of each organisation's annual report. Through the application of empirically-grounded sociological theories to an interpretation of the findings, the thesis makes theoretical, practical, methodological, and empirical contributions. These include employing broader security scholarship related to ontological security and sociological notions of identity work to determine that cyber security plays an important role in business identity, being both threat to, and constituent of, that identity. It shows that the CISO's own identity is conflicted and contradictory and proposes a metaphor of soothsaying that provides further insight. By applying analytical lenses of risk management and governance, it shows that the CISO represents an attempt to control cyber-security uncertainty, and highlights paradoxes relating to the role that the CISO plays in risk management. Further, it introduces the concept of recreancy to cyber-security practice. Cyber security is also explored in wider societal contexts, with the work of Thomas Hobbes used as an analytical lens. This indicates that cyber-security practices within businesses are beneficial to the state and shows that cyber-security threats are survival-level concerns feared by both states and businesses. Reflexivity in relation to the complex and enmeshed nature of cyber-security practice within broader society is also motivated by the thesis. The thesis concludes with considerations for future work that have been provoked by this research.

Published
2023

3. 'Cyber security is a dark art': The CISO as soothsayer

Author

Da Silva, Joseph and Jensen, Rikke Bjerg

Subjects
Computer Science - Computers and Society, Computer Science - Cryptography and Security
Abstract

Commercial organisations continue to face a growing and evolving threat of data breaches and system compromises, making their cyber-security function critically important. Many organisations employ a Chief Information Security Officer (CISO) to lead such a function. We conducted in-depth, semi-structured interviews with 15 CISOs and six senior organisational leaders, between October 2019 and July 2020, as part of a wider exploration into the purpose of CISOs and cyber-security functions. In this paper, we employ broader security scholarship related to ontological security and sociological notions of identity work to provide an interpretative analysis of the CISO role in organisations. Research findings reveal that cyber security is an expert system that positions the CISO as an interpreter of something that is mystical, unknown and fearful to the uninitiated. They show how the fearful nature of cyber security contributes to it being considered an ontological threat by the organisation, while responding to that threat contributes to the organisation's overall identity. We further show how cyber security is analogous to a belief system and how one of the roles of the CISO is akin to that of a modern-day soothsayer for senior management; that this role is precarious and, at the same time, superior, leading to alienation within the organisation. Our study also highlights that the CISO identity of protector-from-threat, linked to the precarious position, motivates self-serving actions that we term `cyber sophistry'. We conclude by outlining a series of implications for both organisations and CISOs., Comment: To appear at ACM Conference On Computer-Supported Cooperative Work And Social Computing (CSCW) 2022

Published
2022

5. Black Duck Welcomes New CIO, CISO in Latest Executive Expansion Moves

Subjects
Computer software industry, Chief information officers -- Appointments, resignations and dismissals, Computers
Abstract

2024 DEC 31 (VerticalNews) -- By a News Reporter-Staff News Editor at Information Technology Newsweekly -- Black Duck Software, Inc. ('Black Duck'), a widely recognized leader in application security, announced [...]

Published
2024

8. CISO MENTORING: WHERE TO TURN IN A CRISIS.

Author

Raywood, Dan

Abstract

The author explores the support and mentoring opportunities for chief information security officers (CISO) who are new to the job. It presents statements from Deloitte CISO Jitender Arora about leaders he approach when he needs advice, PPRO CISO Bronwyn Boyle's emphasis on the importance of building relationships with people she has worked with in the past, and the benefit of finding a seasoned CISO as a mentor.

Published
2024

9. The Unification of the CSO and CISO

Subjects
Electronics and electrical industries
Abstract

The Unification of the CSO and CISO Whether you are fighting anonymous digital adversaries or those that operate in the flesh, it's fair to say that in our security landscape, [...]

Published
2023

12. Cyber Risk Governance in Schweizer Unternehmen. Kernbotschaften einer Studie aus der Sicht von Risk Manager und CISO

Author

Hunziker, Stefan, Trachsel, Viviane, Hunziker, Stefan, and Trachsel, Viviane

Abstract

Cyberriskmanagement erhält zunehmend mehr Aufmerksamkeit in den Leitungsgremien. Allerdings reicht Bewusstsein allein nicht aus. Cyberrisiken werden noch zu oft als reines IT-Problem behandelt und sind zu wenig stark in das unternehmerische Riskmanagement eingebunden. Ausserdem wird der Faktor Mensch im Zusammenhang mit Cyberrisiken oft unterschätzt., + ID der Publikation: hslu_94793 + Art des Beitrages: Fachmedien + Sprache: Deutsch + Bemerkungen: Erstpublikation im EXPERT FOCUS 2022/Dezember + Letzte Aktualisierung: 2023-09-28 16:00:08

Published
2022

13. This Rft Seeks To Establish A Chief Information Security Officer (ciso) Role/function Within The Nli, Provided As A Service By A Third-party Expert Provider

Subjects
Ireland. National Library of Ireland -- Services, Business, international
Abstract

Tenders are invited for: Provision Of Chief Information Security Officer Function And Related Services, National Library Of Ireland Major organization: NATIONAL LIBRARY OF IRELAND Address: Kildare Street, Dublin 2 Country:Ireland [...]

Published
2024

15. From Degree to Chief Information Security Officer (CISO): A Framework for Consideration

Author

1594384, Kappers, Wendi M, Harrell,, Martha Nanette, 1594384, Kappers, Wendi M, and Harrell,, Martha Nanette

Abstract

Educational entities are establishing program degree content designed to ensure cybersecurity and information security assurance skills are adequate and efficient for preparing students to be successful in this very important field. Many Master’s level programs include courses that address these skills in an attempt to provide a well-rounded program of study. However, undergraduates who are in the practitioner’s world have other alternatives to gain these skills. These individuals can gain various certifications, such as the Certified Information Systems Security Professional (CISSP) or the Certified Information Security Manager (CISM). Due to a perceived gap between academics and field knowledge, it appears that academic programs may not fully consider the very specific competencies of C-Suite members (e.g. Chief Information Security Officer (CISO)) since field certification may be the only validation of such skills. Therefore, a framework from degree to industry employment acceptance is needed. To this end, the current study suggests the use of a framework in which to examine and compare C-Suite competencies versus academic preparations. Ultimately, this framework will assist researchers in examining the actual, current job tasks of C-Suite members. Since the CISO position is new to the industry, becoming a common job title within only the last few years, the reporting structure for the CISO varies widely and various organizations have differing expectations of the position [1]. Therefore, the initial phases of this study focus solely upon this position as the starting benchmark. This paper explores historical aspects of the workforce skills gap in the area of computer security while providing survey validation results from Phase I of this project. This pilot investigation invited faculty (n=5; 24% response rate) who are both practitioners and academicians to support this examination and the acceptance of said framework. Demographic data includes a comparison betw

Published
2020

16. Battling cyber-threats a joint effort between compliance and information security: LifePoint Health's VP for Compliance Program Operations and Chief Privacy Officer Ellen Hunt and VP and CISO Andy Heins share how they and their teams work 'hand in glove' to protect their company's data from bad actors

Author

Lefort, Dave

Subjects
Data security, Privacy, Actors, Actresses, Data security issue, Privacy issue, Government, Law
Abstract

Cooperation and communication between risk functions has never been more critical than in today's fast-paced, technology-driven environment. And with cyber-threats growing and companies collecting more and more data on customers [...]

Published
2021

18. Virtual Ciso Consulting

Subjects
Business, international
Abstract

Request for Proposals for Virtual CISO Consulting. Objectives Engage a virtual Chief Information Security Officer (CISO) for a four-month engagement until a permanent Global Head of Cybersecurity is recruited. The [...]

Published
2023

23. Belgium - Safety Consultancy Services - Levering Van Dpo- En Ciso-diensten

Subjects
Consulting services -- Safety and security measures, Business, international
Abstract

Belgium - safety consultancy services - levering van dpo- en ciso-diensten Major organization : FOD BELEID EN ONDERSTEUNING Address : Postal address: Simon Bolivarlaan 30, bus 1 Town: Brussel Postcode: [...]

Published
2023

26. Ciso As A Service

Subjects
Business, international
Abstract

Contract notice: Ciso as a service See ii.2.4The assignment includes the provision of a ciso as a service service to assist vib in making it compliant with the new european [...]

Published
2023

30. Chief Information Security Officer (ciso) Advisory Services

Subjects
Business consultants, Business, international
Abstract

Tenders are invited for Chief Information Security Officer (CISO) Advisory Services USAC strives to provide efficient, responsible stewardship of the programs, each of which is a key national asset in [...]

Published
2023

31. Usac Rfp: Chief Information Security Officer (ciso) Advisory Services

Subjects
United States. Federal Communications Commission, Business consultants, Business, international
Abstract

Combined synopsis/solicitation (original) usac rfp: chief information security officer (ciso) advisory services At the request of the federal communications commission (fcc) office of managing director (omd), and to ensure wide [...]

Published
2023

33. Procurement Of Digital Wall (network Electronic Console) For Cybersecurity Command And Control Centre (4c) At Cybersecurity Centre Of Excellence (ccoe), Ciso Office, Hyderabad Through Gem Portal

Subjects
Union Bank of India, Purchasing, Command and control systems, Data security, Internet -- Safety and security measures, Cyberterrorism, Internet security, Data security issue, Business, international
Abstract

Tenders are invited for Procurement of Digital Wall (Network Electronic Console) for Cybersecurity Command and Control Centre (4C) at Cybersecurity Centre of Excellence (CCoE), CISO Office, Hyderabad through GeM Portal [...]

Published
2023

34. Impact of CISO Appointment Announcements on the Market Value of Firms

Author

Adrian Ford, Ameer Al-Nemrat, Sayed Ali Ghorashi, and Julia Davidson

Abstract

Previous studies concerning the economic impact of security events on publicly listed companies have focussed on the negative effect of data breaches and cyberattacks with a view to encouraging firms to improve their cyber security posture to avoid such incidents. This paper is an initial study on the impact of investment in human capital related to security, specifically appointments of chief information security officers (CISO), chief security officers (CSO) or similar overall head of security roles. Using event study techniques, a dataset of 37 CISO type appointment announcements spanning multiple world markets between 2012 and 2019 was analysed and statistically significant (at the 5% level) positive cumulative abnormal returns (CAR) of around 0.8% on average were observed over the three-day period before, during and after the announcement. Furthermore, this positive CAR was found to be highest, at nearly 1.8% on average, within the financial services sector and showing statistical significance at the 1% level. In addition to the industry sector, other characteristics were investigated such as job title, reporting structure, comparison of internal versus external appointments, gender and variations between markets. Although these findings were not as conclusive they are, nevertheless, good pointers for future research in this area. This overall positive market reaction to CISO related announcements is a strong case for publicly listed firms to be transparent in such appointments and to, perhaps, review where that function sits within their organisation to ensure it delivers the greatest benefits. As 24% of the firms analysed were listed outside the US, this study also begins to counter the strong US bias seen in similar and related studies. This research is expected to be of interest to business management, cyber security practitioners, investors and shareholders as well as researchers in cyber security or related fields.

Published
2022
Full Text
View/download PDF

41. Virtual Ciso Service

Subjects
Business, international
Abstract

Tenders are invited for virtual ciso service Budget base for tender: 150,000.00 Euros Estimated value of the contract: 330,000.00 Euros Type of Contract: Servicios Place of Execution: Espaa - Madrid [...]

Published
2023

42. Tn-5102 Up- Keeping And Assistance In Operation And Maintenance Of Various Equipments|systems In Cyber Security Control Room And Ciso Office , Kstps

Subjects
Data security -- Safety and security measures, Internet -- Safety and security measures, Cyberterrorism -- Safety and security measures, Security management -- Safety and security measures, Internet security, Data security issue, Business, international
Abstract

Tenders are invited for TN-5102 Up- keeping and Assistance in operation and maintenance of various equipments/systems in Cyber Security Control room and CISO office , KSTPS, Doc Fees : INR [...]

Published
2023

44. 1221|2022 Vciso Service (virtual Ciso) For Giahsa (huelva)

Subjects
Business, international
Abstract

Contract awarded: 1221/2022 vciso service (virtual ciso) for giahsa (huelva) 1221/2022 vciso service (virtual ciso) for giahsa (huelva) Contractor name : VIEWNEXT S.A. Contractor address : Av. San Francisco Javier, [...]

Published
2023

46. CISO Global and Ransomware Pioneer Halcyon Join Forces

Subjects
Data security, Phishing, Security software, Cyberterrorism, Network security software, Data security issue, Computers
Abstract

2023 JUN 6 (VerticalNews) -- By a News Reporter-Staff News Editor at Information Technology Newsweekly -- CISO Global, (NASDAQ: CISO), an industry leading cybersecurity and compliance provider, and Halcyon, the [...]

Published
2023

50. Andorra : About forty cyber security experts attend the CISO conference

Subjects
Data security -- Conferences, meetings and seminars, Internet -- Safety and security measures, Conferences and conventions -- Conferences, meetings and seminars, Cyberterrorism -- Conferences, meetings and seminars, Internet security, Data security issue, Business, international
Abstract

About forty experts in cyber security attended the CISO conference (acronym for Chief Information Security Officer) 'Cyberintelligence applied to the cyber security strategy in the company', held this Friday at [...]

Published
2022

Catalog

Books, media, physical & digital resources
See catalog results