Remove aligning-cybersecurity-and-business-nobody-said-it-was-easy
article thumbnail

5 Steps for Becoming a Business-Aligned Cybersecurity Leader

Tenable

Independent business risk study shows when security and the business are aligned around agreed-upon contextual data, they deliver demonstrable results. Folks, cybersecurity is broken. Because we're missing one key piece of information: business context. Here's how to get there. with a high degree of confidence.

Security 101
article thumbnail

Why Cybersecurity Leaders Struggle to Answer the Question ‘How Secure Are We?’

Tenable

Independent business risk study shows cybersecurity is seldom fully integrated into business strategy – and it needs to be. It involves software being used by nearly every business on the planet. Picture this: a headline-grabbing vulnerability has been disclosed. It’s all over the news and social media.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

What COVID-19 Response Strategies Tell Us About the Business-Cybersecurity Disconnect

Tenable

As organizations around the world raced to develop strategies to respond to the COVID-19 pandemic, an independent business risk study shows cybersecurity leaders were largely left out. Yet, many cybersecurity leaders are still struggling to get a seat at the table. . COVID-related scams were the No.

article thumbnail

Aligning Cybersecurity and Business: Nobody Said It Was Easy

Tenable

There's a disconnect between business and cybersecurity. Aligning them can make all the difference. If you’ve served as a CISO, CSO or other cybersecurity leader for any length of time, you’ve likely had a CEO, board member or other senior executive ask you “how secure are we?” The good news? on a fairly frequent basis.

Security 113
article thumbnail

Mind the (Communication) Gap: How Security Leaders Can Become Dev and Ops Whisperers

Tenable

Here’s how security leaders can successfully align with them to weave security into their tools and workflows. As this post explains, security departments must transform from gatekeeping naysayers to business partners. Developers, Ops and DevOps teams must incorporate security into their processes – often a hard sell. Not anymore.

article thumbnail

A Day in the Life of a Business-Aligned Cybersecurity Leader

Tenable

The future belongs to cybersecurity leaders who can align their objectives with an understanding of business risk. I've been working in cybersecurity for 20 years. But whenever I've talked to C-level business executives and the board — in my current role or in previous organizations — none of that matters.

article thumbnail

Communicating Business Risk: Why Existing Cybersecurity Metrics Fall Short

Tenable

How do you communicate the business risk context of your cybersecurity program to your organization’s C-level executives? This is a question I grapple with every day in my role as a cybersecurity leader. In an interview with Tenable, Garza said “For us, determining our level of cyber risk is not that hard.

Metrics 107