The Rise of the BISO Role
summary
Created a BISO practice from scratch inside a telecom: launches a service catalog, runs a “cyber roadshow” to 20+ teams, and builds intake (mailbox → Excel form → user‑friendly forms) plus a request tracker and dashboards. Delivers architectural reviews, PCI and third‑party assessments, log monitoring, and staff allocation; measures show an average two‑week security opinion so timelines are formalized. Process works after repeated refinement but struggles with staffing the right architects, shifting priorities, and avoiding over‑promise.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:22What is a BISO
- 7:37Meeting the Business Units
- 14:44Managing Requests
- 17:14Managing Risk
- 18:34Reporting
- 18:47Qualitative
- 20:16Reports
- 21:49Key takeaways
- 24:13Challenges
- 25:09Actions
- 25:39Conclusion
related talks
49mBusiness Information Security Officer: A Cybersecurity Secret Weapon
42mCISO Panel
51mThe No BS SOC Story
49mStories from the SOC Front Lines
28mThe New CISO: What Got You Here, Won’t Get You There
40mInformation Security Management Programs-Changing the Paradigm on Implementation and Management
53mTake The Helm: Guidance For...
53mOver a Decade of Software Security: What Have We Learned