The cyber crisis impacting U.S.-based enterprises is often swept under the IT rug as a technology issue to be delegated to and resolved by information technology experts who have little to no view on the overall organization’s business or risk issues. At the recent RSA Security Conference, session after session and meeting after meeting, researchers, CSOs and consultancies voiced the same issues: It’s a business problem, not a technology problem, because you're not securing IT – you need to secure the business.
For the next generation of enterprise security leaders, is there a clear path forward to success? Enterprise security leaders discuss mentorships, education, certifications and the skills new CSOs and CISOs will need to succeed in their evolving roles and bring value to the business. But the problem is: with existing security leadership roles varying so widely, is the development of a uniform skill set even possible?