New KnowBe4 study, The Rise of Security Culture, finds that the majority of security leaders (94 percent) say security culture is important for business success, but have yet to merge their security strategies with their overall business strategies.
One of the most rewarding parts of my job, as Editor of Security magazine, is the opportunity to speak with our readers. I recently had the pleasure to speak with Whit Chaiyabhat, staff vice president, crisis manager, for FM Global, one of the world’s largest commercial and industrial property insurers.
The mysterious foreign villains striking the largest companies and political organizations from the dark corners of the Internet tend to get the splashy headlines. However, the network openings that allow outside cyber-attackers to burrow in, infect databases, and potentially take down an organization’s file servers overwhelmingly originate with trusted insiders.
The bottom line: Culture is another way of saying “This is how we do things around here.” In most cases, what is written down or hung on the wall does not align with “how we do things around here.” People will perform their roles, work within their processes and utilize technology to get things done; but the values that undergird their behavior and the ability to understand them and leverage them is one of the keys to unlocking the value of security.
As a leader, you get very few opportunities to create a culture of discipline around the goals and vision for your team. Over the last few years, this core leadership trait of “engagement” has become an imperative. How can you invite your employees into your vision and mission and have them make it their own?
Risks to energy sector enterprises continue to grow, with drones, terrorism and budgetary challenges looming. Compliance requirements are tightening as well, but as Everardo Trujillo, Manager of Information Security Engineering and Operations at Sempra Energy Utilities, says: “A lot of people say ‘compliance makes you secure,’ and it’s the other way around, really.”
ON DEMAND: In this webinar, security expert Pieter Danhieux explores how enterprise security, hand in hand with CISOs and CIOs, can inspire real change, fostering a positive security culture that enables enterprise development teams to become more security-aware, more aligned with internal AppSec specialists and, ultimately, ensuring a cyber-secure enterprise.
This month in Security magazine, we highlight COVID-19 and enterprise security's response. How has the pandemic changed business continuity plans, and what lessons have been learned? Also this month, we profile Chris Hallenbeck, CISO at Tanium, his view on metrics and information security. In addition, security experts discuss video analytics, how to make AI work within your cyber strategy and more.