The role of the CSO and CIO has been changing dramatically and sometimes, it can be hard to keep up The role of the CSO and CIO has been changing dramatically as technology becomes more and more vital to business strategies. Sometimes, it can be hard to keep up.Amol Joshi, SVP of business development at Redwood City, Calif.-based Ivalua Inc., suggests that CSOs and CIOs can pick up a few tricks from Chief Procurement Officers.1. Create and use contract templatesMany CIOs and CSOs are faced with the responsibility of creating or reviewing contracts with outsourcers, contractors, part-time help, software vendors, data centers, cloud services providers and other vendors and suppliers. CPOs have been doing this for a long time, and one trick that the use is create a library of clauses that they can put into a contract when needed.These clauses have to be kept up to date, Joshi said. For example, cloud SLAs evolve all the time, as do compliance requirements. Plus, companies are always learning from their mistakes — and, hopefully, the mistakes of their competitors — and amending their contracts as a result.“CIOs and CSOs need to standardize those clauses and make them available in a central repository so anyone trying to write a contract can use that particular clause,” he said.2. Create a system for compliance monitoringDuring contract negotiations, vendors are going to be on their best behavior, using the best security practices, and otherwise complying with your requirements. All their certificates and certifications will be up to date, their insurance policies are in place.Over time, though, things can start to slip.This is where a monitoring system is critical. CPOs know that they need to ensure that their providers have, say, paid their bills for their liability insurance, or that any new personnel assigned to a project have the required professional licenses. Letting things slide can result in big problems down the line.“CPOs are using technology platforms that make that information available instantly to both suppliers and to the enterprises,” said Joshi.CIOs and CTOs need something similar, he said.3. Make more use of procurement pros In some organizations, the procurement department handles everything except technology purchases, and IT handles its own vendor relationships and risk exposure.But procurement departments have staffers who are experts in ensuring that vendors stay compliance on a day-to-day basis.“CIOs and CSOs should leverage those skill sets,” Joshi said.“Having the CIOs and CSOs also use the purchasing group can make it more streamlined and formal,” he added. “And lead to more effective contracts and higher savings.” Related content news Multibillion-dollar cybersecurity training market fails to fix the supply-demand imbalance Despite money pouring into programs around the world, training organizations have not managed to ensure employment for professionals, while entry-level professionals are finding it hard to land a job By Samira Sarraf Oct 02, 2023 6 mins CSO and CISO Technology Industry IT Training news Royal family’s website suffers Russia-linked cyberattack Pro-Russian hacker group KillNet took responsibility for the attack days after King Charles condemned the invasion of Ukraine. By Michael Hill Oct 02, 2023 2 mins DDoS Cyberattacks news ShadowSyndicate Cybercrime gang has used 7 ransomware families over the past year Researchers from Group-IB believe it's likely the group is an independent affiliate working for multiple ransomware-as-a-service operations By Lucian Constantin Oct 02, 2023 4 mins Hacker Groups Ransomware Cybercrime feature 10 things you should know about navigating the dark web A lot can be found in the shadows of the internet from sensitive stolen data to attack tools for sale, the dark web is a trove of risks for enterprises. Here are a few things to know and navigate safely. By Rosalyn Page Oct 02, 2023 13 mins Cybercrime Security Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe