Being Honest

In this Life of a CISO episode, Dr. Eric Cole defines that a CISO's primary responsibility is to identify, categorize, and present the risks and costs of cybersecurity issues to executives. They must understand the balance between functionality and security and find the sweet spot that works for their company. The law of cybersecurity states that every time you add functionality, you decrease security. Therefore, CISOs must identify and minimize risks associated with new functionalities. 

CISOs should be transparent with …

balance ciso cybersecurity cybersecurity issues executives find identify law life responsibility risks security states understand