Telling Hard Truths to Impact Change in Cybersecurity
summary
Claims three concrete hard truths: the risk picture is out of focus (an MIT study finds less than half of top executives happy with resiliency execution), legacy security processes are slowing response, and security is not a solo sport. Recommends zoom out by presenting spectrum-of-impact risk views to CISOs and boards, run monthly proofs of concept to build nimble tooling, throw out redundant controls and shorten compliance questionnaires, and reach out via groups like ISSA to share what worked and what failed so organizations actually become more resilient.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:39Welcome
- 1:42Hard Truth 1
- 4:33Focus
- 5:35Ruffing feathers
- 8:19Thought diversity
- 9:55Security is not a solo sport
- 13:35Final thoughts
related talks
45mNew Research Reveals Five New Trends for Cyber Resilience
30mCybersecurity Silver Linings
28mHow to Tell the Right Cyber-Story to Executives and Board Members
50mBuilding Cyber Resilience - Considerations for CISOs
19mCybersecurity's Silent Crisis: Protecting the Human Element
40mCulture Matters—Put People at the Heart of Security
54mThe Human Impact of Cyberattacks: Reframing the Defender Role
40mProtecting What Matters Most – Tools for Managing Risk