CXO Panel: Clash Of The Titans; Who Will Survive?
summary
Panel argues whether a CISO should also be DPO, citing GDPR’s prohibition in some places and real-world hybrids where CISOs temporarily hold DPO duties while teams upskill and add legal oversight. Discussion names Equifax and Yahoo as reputation-hit case studies, contrasts banking reporting lines, stresses bug‑bounty/responsible‑disclosure programs and upskilling engineers, and recommends cross‑functional teams with CISO-as-DPO conflict managed by legal oversight, third line of defense audits, and prioritizing reputation over fines as the business risk to mitigate.
AI-written summary · about
chapters (9)
- 0:00Welcome and introduction
- 2:08Future of CISO and DPO roles
- 12:49Conflict of interest between roles
- 19:11Teamwork and third line of defense
- 28:11Cultural shift in security focus
- 34:51Reputational risk vs compliance
- 44:31Impact of breaches on reputation
- 50:17Skills for CISO and DPO
- 57:46Summary and closing remarks
related talks
52mThe Buck Stops….Where? Data Breach Accountability and the C-Suite
52mCISOs and Legal Uniting in a Post Uber and Twitter World
42mCISO Panel
30mThe Evolution of the DPO: Reducing Risk at the Speed of Innovation
01mCISO Legal Risks And Liabilities
47mThe Evolving Role of the CISO and the Security Organization
02h 11mCISO Track Panel
50mCISOs Under Indictment: Case Studies, Lessons Learned, and What’s Next