The book includes insights from the following experts:
- Ben Rothke, Nettitude, Ltd., Senior eGRC Consultant, CEOs Require Security Metrics with a High-Level Focus >>
- Gary Hayslip, City of San Diego, Deputy Director and Chief Information Security Officer, Good Security Metrics Are a Work in Progress >>
- Keyaan Williams, CSIO Programs, EC-Council Senior Executive, Proactively Communicate the Right Security Metrics—Before the CEO Asks >>
- Nikk Gilbert, ConocoPhillips, Director of Global Information Protection and Assurance, Good Security Metrics Build Relationships and Trust >>
- Prasanna Ramakrishnan, Phillips, Global Head of Infosec Risk, To Lead as a CISO, Explain the Business Impact of Security Risks >>
- Adam Ely, Walmart Global eCommerce ,VP of Information Security, Choose Security Metrics That Tell a Story >>
- Dave MacLeod, Welltok, Vice President, CIO/CISO, Use Security Metrics to Present a Strong Action Plan >>
Using Security Metrics to Drive Action was generously sponsored by Tenable.
Your chief executive officer (CEO) is worried. He’s spending more money on IT security. Even though he was assured that his latest IT security technology investments and policies are making the business safer, year after year, he sees organizations victimized by high-profile, costly breaches that severely damage business reputation and brand image. He’s even seen some CEOs forced to resign because of their failure to protect customer data.
Security is a growing concern in the C suite, but conversations about security often leave executives unsatisfied and even confused. Why? Because the person responsible for implementing corporate security—the chief information security officer (CISO)—fails to discuss security in terms the other executives can understand. In fact, this “techno-gibberish” is typically why CISOs tend to be held in lower regard than other executives. We decided to find out how to help CISOs and other IT security leaders reduce their “geek speak” and talk more effectively about security to other C-level executives and the board. With the generous support of Tenable, we asked 33 leading IT security experts the following question:
Your CEO calls and asks, “Just how secure are we?” What strategies and metrics do you use to answer that question?
For anyone seeking a magic security metric that will dazzle CEOs and directors, you know that there’s no one-size-fits-all metric. That said, the contributors to this e-book, based on their knowledge and experiences, believe that many security metrics are highly relevant to business strategy discussions. It’s important to keep context in mind when choosing those metrics, but even the most relevant metrics need the right kind of presentation.
In this eBook, CISOs will discover metrics that support a wide variety of business situations and gain valuable insights that can strengthen their position in the C suite.
