What the Board really wants the CISO to tell them
Jo Stewart-Rattray
Director of Technology & Security Assurance
Session Outline
In recent years we have seen high profile data breaches, one after the other, that have impacted millions of individuals worldwide. Board members and directors have become more aware of the need for them to better understand cyber security and the material risks associated with it and from potential cyber failures. However, this is generally not their area of expertise, particularly in organisations where technology is not the main focus of business, so we see a heavy reliance on reporting from the organisation’s CISO.
Whether a breach is the result of poor business practices or criminal activity, the responsibility to protect sensitive and private data can no longer be the sole purview of the CISO. Boards, directors and security experts will all be judged on their understanding of and response to material risk arising from unintended data breaches and the more frequent, malicious cyber threats that we are seeing.
Boards are, rightfully, concerned about the lagging business confidence from consumers and stakeholders in relation to organisation’s ability to secure their data appropriately and therefore, lean on the CISO to give them the assurance that they are looking for. What stance should the CISO take? How can the CISO give assurance at this level?
This interactive masterclass will give you insights into the world of today’s CISO and the role that he or she plays in working with the Board of Directors, CEO, Audit & Risk Committee and Executive Management in order to keep them abreast of trends within the organisation and across the industry sector that they are operating in. You will be invited to ask questions and to participate with your own ideas!