Call us now:
Split the role? Would you split the role of the CFO, CRO or General Council no, they build functional teams to address their needs and those of their stakeholders.
Cyber need a ‘new way’, we’ve spent to long in the shadows, and cyber attacks and regulation are pulling us out, quickly. We are not, in general, prepared. We as cyber professionals need to find a new way, cyber regulation is creeping up fast, boards are still clueless on the new role that is the CISO. I’ve spoke to many lawyers who can’t wait for cyber regulation to get into gear.
The role of the CISO is going through the same transformation as other professional roles have gone through over the past +100 years (lawyers much longer). Security professionals have to move out of the shadows and focus on the facts that cyber regulation will test their political, leadership, technical and organizational skills. Unfortunately they have to be in the face of leadership, if the want a seat at the leadership table.
CISOs face working in a very complex the environment, one that gives no room to develop the role. You are either on game, or you are not, where one single event can screw it up, which is not a way to work. Unfortunately CISOs have to be permanently on top of their game, at the behest of others such as the CFO. Cyber attacks are here and now, the impact is here and now and boards want answers here and now. Regulation does not give any time for CISOs to build up and demonstrate capability, as the SolarWinds case is demonstrating.
The role does not need to be split, regulators, the board and other stakeholders are looking for a single accountable person to hang a hat on. The role needs recognition and support. Here endeth the rant……….
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7209829802810216450