Last week I had a conversation with a #ciso , ahead of a #CEO forum that is scheduled to present the concept of information security for the coming year. In the materials he brought to our meeting there were no requests for another technology system or another external consulting service. Nor did he seek to deepen or perfect the deliverables he receives from his MSSPs. Really, zero budgetary supplement to what he's already got.

All the comments, but literally all the comments requested by the CISO to anchor in the work plan for 2021 can be defined as "information security culture".

CEOs, technology is necessary up to a certain point. Technology doesn't provide hermetic protection and certainly not a substitute for strategy. If you have a CISO who doesn't ask for extra money and just wants you to help him become a better professional, hug and keep him close.

#director
#cyberresilience