Make Room for Cybersecurity in Enterprise Risk Management

No ratings

Presented at CISOconneticut 2015 by

Rick Patterson

Timothy Rogers

Brian Kelly

For too long, cybersecurity has had its own structure, its own metrics and its own language. Integrating information security standards, guidelines and associated technologies into the wider organizational missions and processes leads to a much stronger security posture. When the cybersecurity standards are coherently aligned with the entirety of the organization, new security initiatives will be easier to design, communicate and implement. The challenge is obvious: transformational change is hard. It’s high time for a high-level conversation about shaping the discourse on risk and how to drive the transformation in both public and private organizations.