Summary
In this chapter, we managed to decode many of the expectations for a CISO, their priorities and challenges. From technical security to a seat at the table and often limited funding, CISOs do not have an easy path to building a cyber-resilient business. While a technical leader in some cases, a CISO oversees cyber-risk management. This includes first understanding the company’s exposures and then quantifying potential financial losses to understand and prioritize mitigative initiatives and risk transfer. The mitigation needs to encompass controls for people, processes, and technology and not focus solely on IT.
Nowadays, due to the extensive threats of cyberattack and massive adoption of technology solutions, companies vary in their efforts to measure their cyber-risk exposures. Some do not have any visibility into cybersecurity. Others limit it to their IT environment. This represents a major challenge for a CISO who needs to understand the broader business environment...
