Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CISO Perspectives: Cybersecurity Budgeting Edition

netspi.com | blog | #metrics | #ciso | #budgeting | #nist-csf | #podcast | #security-management

Summary

Three CISOs share how they present cybersecurity budgets to the board, favoring maturity metrics such as NIST CSF benchmarking over fear-based arguments to justify spending and measure ROI.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Let’s Talk Cybersecurity on the Agent of Influence Podcast
Agent of Influence is NetSPI's cybersecurity podcast hosted by Field CISO Nabil Hannan, featuring expert conversations on EASM, red teaming, CTEM, AI security, and security leadership.
blog · netspi.com
Q&A: Asset Management, Vulnerability Management, and Authentication are Changing the Game for this CISO
AF Group CISO Seth Edgar shares which security activities are making the greatest difference in his security program via the Agent of Influence cybersecurity podcast.
blog · netspi.com
Q&A: Doug Brush Talks Incident Response, DJI Drones, and Mental Health in Cybersecurity
Q&A with Splunk advisory CISO Doug Brush on why incident response evolves slowly, how SolarWinds-style TTPs are nothing new, and why cybersecurity mental health needs top-down prioritization.
blog · netspi.com
Q&A: Diana Kelley Discusses ROI, Application Security, and Inclusivity
Security Curve CTO Diana Kelley on communicating cybersecurity ROI through a business-profitability lens, building application security programs, and improving inclusivity in the security industry.
blog · netspi.com
The Biggest Challenge Facing CISOs Today – and the Key to Winning
A 30-year security veteran shares lessons for CISOs: simple misconfigurations often beat advanced skills, and new senior leaders should focus on understanding the business before spending on tools.
blog · netspi.com
Why Organizations Should Think More Holistically About Preparing for and Responding to a Security Breach
West Monroe's Sean Curran discusses how COVID-19 exposed weak disaster recovery and business continuity plans, why cyberattacks surge during crises, and why security is everyone's responsibility.
back