Challenges and Keys to Success for Today’s CISO from the Former CISO at the CIA

Being a CISO is hard. Robert Bigman knows this firsthand. Having served as the second CISO in the history of the CIA, he was initially responsible for defining what the CISO role would be and how he could have the greatest influence and impact on the agency’s security posture.

Now, as an independent consultant, Bigman works with the U.S. Government, foreign governments, and Fortune 50 companies to help them both build productive cybersecurity programs and successfully resist attacks from the most sophisticated hackers.

Read this tip sheet to learn why Bigman says these are the biggest challenges of being a CISO:

  1. Not doing IT well as an organization
  2. Spending the bulk of your time on reactive projects

And why you need to:

  1. Instill a sense of responsibility in your IT organization for cybersecurity
  2. Stop focusing on compliance

About Robert Bigman

Robert Bigman worked at the CIA for 30 years on various cyber security assignments on policy, cryptography, and technology operations support, and was the agency CISO for the last 15 years.

He is an information security trailblazer and participated in developing security measures for government computers well before the commercial industry found the Internet. Now an independent consultant, Bigman works with the U.S. Government, foreign governments, and Fortune 50 companies, helping them both build productive cyber security programs and successfully resist attacks from the most sophisticated hackers.

Get the Tip Sheet

Need a Quote?

Common Questions

What is Penetration Testing as a Service (PTaaS)?

PTaaS is NetSPI’s delivery model for penetration testing. It enables customers to simplify the scoping of new engagements, view their testing results in real time, orchestrate faster remediation, perform always-on continuous testing, and more - all through the Resolve™ vulnerability management and orchestration platform. Learn More

Why should I use NetSPI?

Your attack surface is constantly evolving. We help organizations defend against real-world attacks by being the best at simulating real-world, sophisticated adversaries with the products, services, and training we provide. Our historical testing data shows that there is simply no replacement for human-led manual deep dive testing. This level of testing finds the most severe vulnerabilities that tools will never uncover. Our proven methodology ensures that the client experience and our findings aren’t only as good as the latest tester assigned to your project. That consistency gives our customers assurance that if vulnerabilities exist, we will find them. In addition, our Resolve platform delivers automation to ensure our people spend time looking for the vulnerabilities that tools miss. We provide automated and manual testing of all aspects of an organization’s entire attack surface, including external and internal network, application, cloud, and physical security. We know how attackers think and operate, allowing us to help our customers better defend against the threats they face daily.

Contact Us

Cookies Required

Sorry, cookies are required to use this website.

Allow Cookies