Page 73 - index

What do you think their answers would be?

The CIO and his security team looked at me and said; “to be the best in their industry – best
service / best products”. My response – no. CEO’s will not say the best in their industry, nor will

they say have the best technology amongst their peers, or have the best center of excellent for
information security.

CEO’s will say their ultimate goal is to maximize shareholder wealth. Pretty simple.

The CBSO can ensure information security supports that goal by deploying levels of protection
processes that meet actual business risk, business compliance requirements, and align to

business costs.

Overall, executive management will support the CISO transforming into a CBSO and being a

key member of the executive team that understands technology, information security threats
and solutions that align realistically with the company’s business objectives.

About the Author

An industry leader and innovator, Kyle F. Kennedy is a Senior Executive who focuses within the
areas of Information Security, Risk Management, Audit, Disaster Recovery, IT
Solutions, Business Process Management (BPM), and Information Technology
Governance-Risk-Compliance (GRC). Kyle is a leading expert on identity
management, access management, user account provisioning, entitlement
management, federation, privileged identity management, role design and
management, and identity management as a Service. Kyle also covers
enterprise fraud management, which has many synergies with identity and access management
when an organization needs to protect against risk and wants to manage fraud appropriately.

73 Cyber Warnings E-Magazine – May 2015 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide