Search

Your search keyword '"CISO"' showing total 20 results
Start Over Descriptor "CISO" Topic chief information officers
20 results on '"CISO"'

1. The adoption of a cybersecurity framework in a healthcare, surgical and oncological environment: Synergy-net a Campania FESR-POR (European Fund of Regional Development-Regional Operative Program) research project.

Author

Parmeggiani, Domenico, Moccia, Giancarlo, Torelli, Francesco, Miele, Francesco, Luongo, Pasquale, Sperlongano, Pasquale, Allaria, Alfredo, Sciarra, Antonella, De Falco, Nadia, Donnarumma, Maddalena, Colonnese, Chiara, Bassi, Paola, and Agresti, Massimo

Subjects
HEALTH Insurance Portability & Accountability Act, CHIEF information officers, INFORMATION technology security, MANAGEMENT information systems, INFORMATION resources management
Abstract

As with any other sector, the healthcare industry is also prone to cyber threats. Though the nature of threats is similar to any other industries, it does need to address sector-specifics risks along with security risks in its operating environments. Every day the Hospitals need to ensure that the information is adequately secured. Currently Chief Information Officer (CIOs) and Chief Information Security Officer (CISOs) are trying to protect their hospital Information Systems (IS) departments from security threats. It's imperative to take necessary measures to ensure risk management and business continuity. The paper addresses some of the challenges faced by healthcare organizations in the selection of a cyber-security framework by reviewing some of the common standards and frameworks that are used by healthcare organizations. The also paper highlights the advantages and disadvantages of each of the standards as: international organization for standardization (ISO)/IEC 27799, Health Insurance Portability and Accountability Act (HIPAA), HITRUST, Nation Institute of Standards and Technology (NIST) has developed the Cyber Security Framework (CSF) and General Data Protection Regulation (GDPR) and compare and the additional directives provided by this standards. [ABSTRACT FROM AUTHOR]

Published
2024

2. The Soft Skills Business Demands of the Chief Information Security Officer.

Author

Smit, Richard, van Yperen Hagedoorn, Jeroen M. J., Versteeg, Patric, and Ravesteijn, Pascal

Subjects
CHIEF information officers, BUSINESS skills, SOFT skills, JOB analysis, JOB advertising
Abstract

While many researchers have investigated soft skills for different roles related to business, engineering, healthcare and others, the soft skills needed by the chief information security officer (CISO) in a leadership position are not studied indepth. This paper describes a first study aimed at filling this gap. In this multimethod research, both the business leaders perspective as well as an analysis of CISO job ads is studied. The methodology used to capture the business leaders perspective is via a Delphi study and the jobs adds are studied using a quantitative content analysis. With an increasing threat to information security for companies, the CISO role is moving from a technical role to an executive role. This executive function is responsible for information security across all layers of an organisation. To ensure compliance with the security policy among different groups within the company, such as employees, the board, and the IT department, the CISO must be able to adopt different postures. Soft skills are thus required to be able to assume this leadership role in the organisation. We found that when business leaders were asked about the most important soft skills the top three consisted out of 'communication', 'leadership' and 'interpersonal' skills while 'courtesy' was last on the list for a CISO leadership role. [ABSTRACT FROM AUTHOR]

Published
2021
Full Text
View/download PDF

3. From Degree to Chief Information Security Officer (CISO): A Framework for Consideration.

Author

Kappers, Wendi M. and Harrell, Nan

Subjects
CHIEF information officers, INFORMATION skills, CURRICULUM planning, JOB skills, INFORMATION technology security
Abstract

Educational entities are establishing program degree content designed to ensure information security skills are adequate and efficient for preparing students to be successful. Due to a perceived gap between academics and field knowledge, programs may not fully consider the competencies of C-Suite members. This study suggests the use of the Leavitt Diamond framework in conjunction with a DACUM approach to assist researchers in examining C-Suite skills as they relate to academic studies. This framework will assist researchers in examining C-Suite skills as they relate to academic studies. Since the Chief Information Security Officer position is new to the industry with reporting structures and roles varying widely, this study focuses on that role as a benchmark. This paper explores historical aspects of the computer science skills gap and provides survey validation results from invited faculty (n=5; 24%), who are both practitioners and academicians. A comparison between degree attainment and employment position is recorded to explore academic preparatory to job skill needs. Future curriculum designs will be discussed. [ABSTRACT FROM AUTHOR]

Published
2020
Full Text
View/download PDF

4. Majority of global CISOs want to split roles as regulatory burdens grow.

Author

Jones, David

Subjects
CHIEF information officers, COMPUTER hackers, COMPUTER security, COMPUTER crimes, COMPUTER networks
Abstract

The article offers information on the growing consensus among Chief Information Security Officers (CISOs) that their roles should be divided into two separate positions due to increasing regulatory and financial responsibilities. Topics include insights from a recent Trellix and Vanson Bourne report indicating that a majority of CISOs advocate for a technical security role and a compliance-focused position, as well as concerns about heightened personal liability from regulatory changes.

Published
2024

5. Microsoft names deputy CISOs, flushes dead accounts as part of internal security overhaul.

Author

Jones, David

Subjects
INTERNET security, CORPORATE reorganizations, CHIEF information officers, INTERNAL security
Abstract

The article reports on the launch of a Cybersecurity Governance Council by Microsoft as part of a restructuring of its internal security culture following a report from the federal Cyber Safety Review. Topics include duty of the council, the naming of 13 deputy chief information security officers (CISOs) by Microsoft that will be responsible for specific product segments within the company, and internal changes detailed by Microsoft to reduce risk in its cloud and production environment.

Published
2024

6. Kevin Mandia's 5 question confidence test for CISOs.

Author

Kapko, Matt

Subjects
CHIEF information officers, SECURITY management, DIGITAL currency, EXECUTIVES
Abstract

The article presents the discussion on Kevin Mandia's advice to CEOs and boards on evaluating the effectiveness of their Chief Information Security Officers (CISOs), emphasizing the importance of having a security-minded CISO for a strong security program. Topics include Mandia's perspective on the challenges of cybersecurity, the asymmetric nature of cyberthreats; and the five questions he developed to help executives gauge their CISO's capabilities.

Published
2024

7. 3 CIO lessons for maximizing cybersecurity investments.

Author

Wilkinson, Lindsey

Subjects
CHIEF information officers, INTERNET security, RATE of return, SENIOR leadership teams, ORGANIZATIONAL change
Abstract

The article focuses on three critical lessons for CIOs (Chief Information Officer) to maximize cybersecurity investments, emphasizing the importance of taking stock of existing assets, identifying gaps, and clearly demonstrating the value of investments. It highlights how, despite increasing awareness of cybersecurity risks, tech leaders must still effectively communicate the Return on Investment of their investments to the C-suite to secure necessary resources and drive organizational change.

Published
2024

8. THE CHIEF INFORMATION SECURITY OFFICER: AN EXPLORATORY STUDY.

Author

Karanja, Erastus and Rosso, Mark A.

Subjects
CHIEF information officers, INFORMATION technology security, DATA security failures, STRATEGIC planning
Abstract

The proliferation and embeddedness of Information Technology (IT) resources into many organizations’ business processes continues unabated. The security of these IT resources is essential to operational and strategic business continuity. However, as the large number of recent security breaches at various organizations illustrate, there is more that needs to be done in securing IT resources. Firms, through organizational structures, usually delegate the management and control of IT security activities and policies to the Chief Information Security Officer (CISO). Nevertheless, there seem to be a number of firms without a CISO and for the ones that do, there is little consensus regarding who the CISO should be reporting to. This exploratory study investigates the organizational security reporting structures using a dataset of all the firms that hired a CISO between 2010 and 2014. The results suggest that the number of firms hiring CISOs is increasing and that the hired CISOs are predominantly coming from outside the firm. Also, CISOs who are hired to fill newly created positions tend to report to the CEO whereas replacement hires for existing positions tend to report to the CIO. These findings have implications for both academics and practitioners. [ABSTRACT FROM AUTHOR]

Published
2017
Full Text
View/download PDF

9. As CISOs grapple with the C-suite, job satisfaction takes a hit.

Author

Poremba, Sue

Subjects
JOB satisfaction, INTERNET security, CHIEF information officers, CYBERTERRORISM, WAGES
Abstract

The article focuses on the critical issue of job satisfaction among Chief Information Security Officers (CISOs), highlighting its direct correlation with their access to organizational leadership. It discusses how despite lucrative salaries, many CISOs are considering job changes due to feeling scapegoated for cyber incidents and compliance failures. It emphasizes the importance of integrating CISOs into board-level discussions to enhance organizational cybersecurity resilience.

Published
2024

10. How CISO salaries are faring as businesses ask more of security.

Author

Poremba, Sue

Subjects
CHIEF information officers, WAGES, INTERNET security, ORGANIZATIONAL transparency, COMPENSATION (Law)
Abstract

The article focuses on the salaries of Chief Information Security Officers (CISOs), highlighting their significant compensation packages, often surpassing six figures, and the increasing importance of their role within organizations due to cybersecurity risks. Topics include the impact of technical skills on salary, the influence of salary transparency laws on compensation trends, and the ongoing challenge of recognizing the value of security in relation to compensation.

Published
2024

11. Many execs still insist top role for CISO is to be security 'fall guy'.

Author

Weldon, David

Subjects
SENIOR leadership teams, CHIEF information officers, DATA security failures, INTERNET security, LEADERSHIP
Abstract

The article discusses a research report released from ThreatTrack Security, specialist in identifying threats, which revealed that C-level executives do not believe that chief information security officers (CISO) deserves leadership position. Topics discussed include lack of appreciation of CISO's by C-level executive despite high-profile data breaches, views of ThreatTrack President John Lyons, and need for cybersecurity leadership.

Published
2015

12. CISOs need more clout, but how much is enough?

Author

Weldon, David

Subjects
INFORMATION technology conferences, CHIEF information officers, INTERNET security, CONFERENCES & conventions
Abstract

Information about the topic discussed during a roundtable in New Jersey, which gathered information technology (IT) leaders who focused on cybersecurity and the need to afford chief information security officers (CISO) more clout in the organization, is presented.

Published
2015

13. CIO and CISO summit offers hard dose of transformation reality.

Author

Weldon, David

Subjects
CHIEF information officers, SECURITY management, FINANCE, SUPPLY & demand, EMPLOYEES
Abstract

The article offers information on the chief information officer (CIO)/CISO Summit concerning funding and resources to help CIO in the battle for security supremacy. It mentions that the summit sessions was entitled "Solidifying the Role of the CIO." It also mentions that skills are in sparse supply at this time and many IT departments are finding that they are having to build employees from the ground up rather than hiring them in already 'made.

Published
2015

14. Steps for keeping your organization secure as CIO.

Author

Poe, Emily

Subjects
CHIEF information officers, ASSOCIATIONS, institutions, etc., EMPLOYEE selection, SECURITY management, SECURITY systems
Abstract

The article offers suggestions for chief information officers how they can maintain the security of their organization. It mentions views of Ed Marx, CIO of Texas Health Systems, on implementation of security program in a organization. It also mentions hiring of a CIO who can devote majority of time security.

Published
2014

15. News Scan: Do you need a CISO?; Stevie Awards name top firms in IT; More.

Author

Weldon, David

Subjects
INFORMATION technology, CHIEF information officers, BUSINESS awards, AWARDS
Abstract

The article offers the U.S. information technology (IT) industry news briefs as of September 2014. Topics discussed include corporations under public corporation ranking Fortune 500 club are required to have chief information officer in the organization, the IT Skills and Certifications Pay Index from research and advisory firm Foote Partners related to growth of noncertified IT skills in the country and winners of the American Business Awards including AT&T, Engility and Accenture.

Published
2014

16. Growing security threats put focus on CISO role.

Author

Weldon, David

Subjects
INTERNET security, COMPUTER security, CHIEF information officers, RISK management in business
Abstract

An interview with Jamey Cummings, co-leader of executive search company Korn Ferry's Cybersecurity Center of Expertise, is presented. Topics discussed include his views on the focus of organizations on information security in the wake of increased cyberattacks, his opinion on the risk assessment of companies for security breaches, and role of chief information security officer (CISO) on tackling the problem related to security breaches.

Published
2014

17. Executive study: CISOs mere scapegoats for data breaches.

Author

Weldon, David

Subjects
CHIEF information officers, SENIOR leadership teams, ORGANIZATIONAL goals, INTERNET security, LEADERSHIP
Abstract

The article focuses on the findings of a new study by business analyst ThreatTrack Security, which analyses the role of chief information security officer (CISO) in organizations. Topics discussed include lack of awareness of organizational objectives in CISO, responsibility of CISO for cybersecurity purchasing decisions, and leadership role of CISO in the organization.

Published
2014

18. When to hire--and forgive--a CISO.

Author

Weldon, David

Subjects
CHIEF information officers, EMPLOYEE recruitment, COMPUTER security, INFORMATION technology security
Abstract

An interview with Bob West of Fifth Third Bank is presented. He mentions the role of chief security officer (CSO) or chief information security officer (CISO) in protecting their organizations from cyber threats. It mentions the views of West on hiring CSO. He mentions that general counsel, compliance, technology, and business leaders should participate in conversation concerning CSO hiring.

Published
2014

19. W. Edwards Deming hates your approach to IT security.

Author

C. Slater, Derek

Subjects
INFORMATION technology security, INFORMATION technology management, INFORMATION technology industry, CHIEF information officers, SOFTWARE measurement
Abstract

The article focuses on Information Technology (IT) security discipline and its hierarchy within corporations with flaws in the governance. It states that security director of a firm is member of IT department who reports to Chief Information Officer (CIO) and his or her work is managed on comparative set of tactical metrics. It mentions the comment of W.Edwards Deming, business management teacher, that this type of management is irrational and it requires reflex action.

Published
2013

20. The CISO's morphing role.

Author

Kim, Jim

Subjects
CHIEF information officers, AMERICAN business enterprises, RISK management in business, BUSINESS enterprise security, INFORMATION resources management, BOARDS of directors
Abstract

In this article, the author focuses on the functions of chief information security officer (CISO) in U.S. business enterprises. He informs that CISO has shifted their focus from information security programs other risk management programs. He also mentions that CISO is asked to take three responsibilities including for privacy, risk management and information security management and then they are required to report to board of directors.

Published
2013

Catalog

Books, media, physical & digital resources
See catalog results