Security Magazine: CISOs aren’t scapegoats: Fostering a security-first culture

Security Magazine recently featured NetSPI’s CISO Joe Evangelisto’s insights on the evolution of the CISO role and why organizations must implement a proactive security culture to keep pace with today’s evolving threats. Read the preview below or view it online. 

+++

Ten years ago, it was the norm for security breaches to be the sole responsibility of the chief information security officer (CISO). For this reason, the CISO role traditionally had a higher turnover rate, with many experiencing extreme burnout. But now, as data breaches make regular headlines and every organization becomes a lucrative target for cybercriminals, IT security has become a business priority, causing the full C-suite to take note. 

Cybersecurity is now a business enabler, directly impacting the bottom line with emerging regulations and making it more of a priority than ever for organizations. In fact, according to the SEC’s updated guidelines that went into effect at the end of last year, public companies now have four business days to report a cybersecurity breach that may impact an organization’s bottom line to the SEC. This means that CFOs and CISOs will have to work together to ensure breaches are disclosed on 10-K and 20-F forms. 

You can read the full article at https://www.securitymagazine.com/articles/100626-cisos-arent-scapegoats-fostering-a-security-first-culture