Why Does My CISO Hate Me?

We got asked by a listener to help answer the question, “Why Does My CISO Hate Me?” While we may not be privy to the exact situation in play there, we are pretty sure that no one’s CISO truly hates them (but they may not be fond of all the things that everyone does all the time). In the debate today, we talk about some of the things that challenge CISOs including:

Security is more than just confidentiality… there’s also integrity and availability
Undocumented processes and changes make it hard to figure out where things go wrong
Security is a bidirectional partnership, not an Q&A/task queue from the rest of the organisation, nor the acceptor of risks
Please ask questions if you are concerned about something or want more info, or even if something sort of smells fishy (or phishy). There are no such thing as stupid questions, only unasked ones.

We also highlight a number of the things that CISOs and security teams can improve on to build better and stronger relationships across the organisation, too, such as:

Better listening and asking good questions
Understanding the business through servant leadership
Helping to determine what is most important to the business (and what needs to be protected)

We are all heading toward a common goal, so let’s work together to accomplish it!

Thanks for listening. Until next time…

Support The Great Security Debate

Links: