CISOs: What you can control – and what you can’t – in GDPR
80% of GDPR is out of the CISO’s control...
Equifax proves the CISOs right
Are we witnessing a tipping point for an archaic cybersecurity framework based on SSNs?
How to engage with the C-suite on cyber risk management, part 2
How to engage with the C-suite on cyber risk management, part 2: qualify threats and prioritize risks.
In Equifax data breach, three hard lessons in risk
How much security risk can an organization accept before it’s on very thin ice? The equation is simple: decide how much money it will take to reduce the risk, and how much more money an organization will earn by accepting that...
How to engage with the C-Suite on cyber risk management
CISOs have the difficult job of delivering meaningful metrics to a Board of Directors that is not comprised of security professionals. In order for them to communicate security and risk effectively, they need to meet board members...
