Security Leadership and Management - Articles - Page 443

How CISOs Can Effectively Measure and Report Security Operations Maturity

It's not the number of moving pieces in your security program that matter; it's how those pieces are making your organization more resilient that truly counts. How do you achieve that goal?

James Carder

August 10, 2020

When reporting to the board of directors, the majority of CISOs measure the effectiveness of their program against a proven model. But what exactly should a CISO be measuring and reporting? Here are some top recommendations.

Healthcare Data Compliance: Maintaining Integrity, Privacy and Security

Four healthcare security lessons learned during the initial COVID-19 surge

Jonathan Langer

August 10, 2020

By looking at hospitals – and the resulting mad scramble and actions they took to protect their patients – there are four lessons that can be distilled to help those in the thick of a spike or for those planning for the next surge.

Transdev names new vice president of safety and security

August 10, 2020

Julie Peel has been named Transdev’s vice president of safety and security.

J. Mike Johnson named police chief at Texas A&M University

August 10, 2020

Texas A&M University has named J. Mike Johnson its next police chief.

We are all Jeff Bezos

Mike Fong

August 7, 2020

As much of the world continues to hunker down at home in response to COVID-19, threat actors continue to find ways of exploiting the crisis to gather sensitive and valuable information from individuals. But while we’re busy making sure that our primary computers and cloud-based accounts are locked down, it’s often the devices we least suspect – our smartphones – that provide the opening that hackers need. The 2018 hacking of Jeff Bezos’s iPhone X, perhaps the most famous example of smartphone hacking, provides an important reminder that these most personal of devices should be used with appropriate caution, especially in this time of upheaval.

University of Utah names new Director of Campus Security

August 7, 2020

As part of reorganizing and updating safety functions at the University of Utah, Chief Safety Officer Marlon C. Lynch created a new position to direct Campus Security and to oversee public safety compliance and accreditation.

Revised NIST Cyber Security Framework - Security Magazine

How to lead an economical and efficient infosec program

Vinay Sridhara

August 7, 2020

Today's challenging reality presents an opportunity for CISO’s to reevaluate the economics and efficiencies of their current infosec program. To do so, CISO’s must narrow their focus on maximizing their return on investments and shift to a risk-based prioritization strategy. No matter the situation, CISO’s are always expected to meet goals and drive results. Even though security professionals cannot reduce risk to zero, they can reduce risk significantly by first eliminating the most impactful risks facing their organization. Below, I discuss the four critical steps of leading an economical and efficient information security program while following a risk-based approach.

Outsourcing Data: Don't Take a Fairytale Approach

The good, the bad and the ugly: Standard contractual clauses after Schrems II

Mike Slipsky

Saad Gul

August 7, 2020

Countless businesses export data from the European Union to the United States. Does your human resources office have information on European employees? The sales department information on European clients? That is personal data. The question is if data exports can continue in the wake of the Court of Justice of the European Union’s (CJEU) ruling in the “Schrems II” case.

Data Protection by Design: Eight Questions to Help Protect User Data from the Start

How are you reaching your privacy goals for 2020?

Lisa Phillips

August 7, 2020

By implementing a data protection by design approach, both before and during product development, organizations will build more trust with customers and end users, and curtail risk of future privacy-related conflicts.

The Uncharted Path for New Security Leaders

Hiring a CISO: The evolving role of your security executive

Karen Turrini

Douglas Gladstone

August 6, 2020

Before COVID, cybersecurity was a concern for businesses everywhere. In fact, in Microsoft’s 2019 Global Risk Perception Survey, 57 percent of companies ranked cybersecurity as a higher risk than economic uncertainty and brand reputation or damage. Looking ahead, what does all of this mean for the role of the Chief Information Security Officer (CISO)? Not only is it more important than ever before, but the role has shifted since the start of COVID.