The Lingering Beige Desktop Paradox

October 14, 2024 at 09:56PM The commentary reflects on the challenges of “shadow IT” in the security industry, emphasizing the prevalence of outdated systems (“beige desktops”) running unvetted code. While organizations implement controls, shadow IT persists. The author questions whether the Chief Information Security Officer or the Chief Financial Officer should bear responsibility for this … Read more

It’s Time to Promote Security Talent From Within

August 14, 2024 at 06:40AM A well-known scientist’s keynote at a conference offered stimulating and entertaining insights on the value placed on science by countries with scientists on their currency. Emphasizing the importance of recognizing talent within the security community, the speaker urged promoting from within citing benefits of real-world expertise, problem-solving skills, trust, respect, … Read more

CISO as a CTO: When and Why It Makes Sense

May 10, 2024 at 02:36PM Enterprises are realizing that CISO’s skills in developing risk-based cyber programs can be applied to other C-suite roles. This suggests a growing appreciation for the transferability of CISO’s expertise across leadership positions. Based on the meeting notes, it seems that enterprises are realizing that the skills and experience of a … Read more

Data Security and Collaboration in the Modern Enterprise

October 18, 2023 at 08:55AM Modern enterprises face the challenge of balancing the need for data collaboration and expanded access with the increased risk of cybersecurity threats. Traditional data security measures are insufficient for the data needs of modern enterprises. The CISO Survival Guide emphasizes the importance of data access control and the intersection of … Read more