Exploring Process in the 90-day plan
By formal definition, a process is “a series of actions or steps taken in order to achieve a particular end.” If you have just landed a new CISO role, you will need to understand how processes work – or perhaps don’t work. The CISO will have a clear desire to have effective processes and be efficient, to avoid extra work and effort. For every new CISO, one of the most critical processes is business engagement. When this engagement is positive, the CISO can work with colleagues to understand business imperatives and how the cybersecurity risk posture sits in that overall context.
Understanding how Cyber engages the business
The CISO must play a strong leadership role to integrate the business strategy and objectives with cybersecurity. This requires the CISO to work with business colleagues to develop a cyber strategy that supports the business agenda.
Hence, ongoing dialogue is necessary to facilitate two-way...
