Page 44 - CDM-CYBER-DEFENSE-eMAGAZINE-December-2018

5 Reasons CISO’s Fail

THESE COMMON MISSTEPS CAN DERAIL YOUR SECURITY PROGRAM QUICKLY
by Jody Paterson, CEO, ERP Maestro

Increased security breaches, fraud and access risks have resulted in the advent and rise of the Chief
Information Security Officer (CISO) as a critical executive. Statistics indicate that these security concerns
continue to escalate and also include a surge of internal cyberattacks. The need for the CISO is clear.

According to a Ponemon Institute report, “as cyberattacks and other threats increase in frequency and
sophistication, the CISO role will become more critical, especially in managing enterprise risk, deploying
security analytics, and ensuring the security of Internet of Things (IoT) devices.”

Most CISOs have a sharp vision for the mission of their role: protect the organization, safeguard the
business name and reputation, prevent personal and executive liability, and try to do it in the most cost-
effective way possible.

However, even the most experienced security executive can make mistakes that put a company at
greater risk. The following are common blunders that cause CISOs to fail and put their jobs at risk, with
advice on how to avoid making the same errors.

44