Intro I have seen quite a few articles on what CISO’s should concentrate on so I am going to give you my opinion. So you have just landed a new role as CISO so after induction (if you don’t have one add it to the list of items to resolve) […]
After a security certification exercise such as ISO27001 or PCI, everything goes quiet, there are no resources available to keep compliant. As a Ciso I have had peers complain that leadership didn’t perceive that compliance frameworks like ISO, PCI, HIPAA, or NIST requires maintenance after the fact. The challenges CISOs […]