Challenges and Keys to Success for Today’s CISO from the Former CISO at the CIA

Risk Neutral CEO Jeff Sauntry on the Chief Risk Officer role's evolution, the five enterprise risk categories, and how security leaders can translate technical risk into board-level language.

Security Curve CTO Diana Kelley on communicating cybersecurity ROI through a business-profitability lens, building application security programs, and improving inclusivity in the security industry.

A 30-year security veteran shares lessons for CISOs: simple misconfigurations often beat advanced skills, and new senior leaders should focus on understanding the business before spending on tools.

Recaps RSA 2020, highlighting Rohit Ghai's call to reframe the narrative around cyber-resilience, why CISOs must bridge technical and boardroom conversations, and how intel sharing aids defense.

Kicks off a series on building an application security program, emphasizing policies, standards, and procedures as the foundation before tooling, with placement guidance in existing portfolios.

Since the role of the Chief Information Security Officer (CISO) and how he or she reports has a major impact on security and risk, I think it’s interesting to look at how different organizations have structured the position. With that said, there is very little consistency other than a correlation with the industry vertical’s understanding of IT risk.