CYBER RISKLEADERSHIP:From the backroom to the boardroom,What YOU need to know to survive

Malcolm HarkinsGlobal Chief Information Security Officer @ProtectToEnable

/in/malcolmharkins

WHAT IS THE MOST SIGNIFICANT

VULNERABILITY

WE FACE TODAY

THE MISPERCEPTION

OF RISK

WHAT DRIVES

THE

MISPERCEPTION

OF RISK?

“Many CISO’s have long expressed concern over their

inability to obtain resources and funding support for the

information security investments deemed necessary to

provide suitable levels of protection” *

* Source: Fortune 100 CISO from 2009 security industry event

Version 1.0 – 1760s Version 2.0 - 1860s Version 3.0 - 1990s

• Electric Lights

• Communication

• Oil & Gas

• Mass Production

• Automobiles

• New Materials

• Steam and coal

• Railways

• Factories

• Printing Press & Mass Education

• The Internet

• Molecular Biology

• Renewable Energy

• Super Information Highways

• “Smart” Everything

THE INTERNET

OF THINGSA new world of opportunity ...

and an expansion of risk

THE INTERNET OF THINGS

THE CHALLENGEWe have two battlefields

CYBER ACTORS GROWING ATTACK SURFACE

Consequence and impact growing – across users, business, and soon society if it doesn’t get addressed

EXTERNAL CHALLENGES – WE FIGHT THIS EVERY DAY

INTERNAL CHALLENGES – WE GET SLOWED AND DISTRACTED BY THIS

BEURACRACY BUDGETS BEHAVIORS

Consequence & impact: on your team, on you - affecting the “stamina” to keep going

WHAT DOES IT TAKE TO WIN ON BOTH FRONTS

HEROES AND HEROINES

PROCESS PEOPLE PRODUCT

“It is not enough to fight. It is the spirit which we bring to the fight that decides the issue.” - General George Marshall

PROCESSMitigate the misperceptions of risk.

How you communicate,

coordinate, and convince.

PEOPLEWhat do heroes and heroines do

RUN TOWARDS RISK

PEOPLEWhat do they look like

Value To the Business

Z-Shaped

Skills

Business Acumen Breadth

Value To IT

Technology Breadth

PEOPLEWhat do they possess

25

“Character is, in the long run, the

decisive factor in the life of

individuals and of nations alike.”

- Theodore Roosevelt

PRODUCTWhat does it take to have a

hero/heroine security solution

GOOD SECURITY

PRODUCTS

LOWER YOUR

RISK OVER TIME.

GREAT SECURITY

PRODUCTS ARE

COST EFFECTIVE.

“GOOD” and

“GREAT” Products

LOWER total cost of

control

AMAZING SECURITY

PRODUCTS IMPROVE

YOUR USER’S

EXPERIENCES.

“GOOD” and

“GREAT” Products

LOWER total cost of

control

ALWAYS REMEMBERHERO

PRODUCTS

DO IT ALL.

ALWAYS REMEMBER

IT’S TIME TO TAKE A

STAND ON A LARGER

ISSUE.

IT’S TIME TO TAKE A

STAND ON A LARGER

ISSUE.

“There are two primary choices in life:

to accept conditions as they exist, or accept the

responsibility for changing them.”

–Denis Waitley, motivational speaker, writer and best-selling author

SECURITY SOLUTIONS

AND LEADERS SHOULD

BE FORCE MULTIPLIERS

ON OUR TWO

BATTLEFIELDS

IT’S ALL ABOUT

PROTECTING TO ENABLE

PEOPLE, DATA, AND

BUSINESS.

You can never be great if you want to be there for the

wrong reason

Maximize your strengths and minimize your weakness

Constantly pursue perfection but it’s ok to “win ugly”

ALWAYS REMEMBER

OUR CALL TO ACTION

Demand “heroes and heroines”

from our people and products.

Can never be great if you want to be there for the wrong reason

Maximize your strengths and minimize your weakness

Constantly pursue perfection but it’s ok to “win ugly”

ALWAYS REMEMBERIt is not the critic who counts; not the man who points out how the

strong man stumbles, or where the doer of deeds could have done them

better. The credit belongs to the man who is actually in the arena;

whose face is marred by dust and sweat and blood; who strives

valiantly; who errs, who comes short again and again, because there is

no effort without error and shortcoming; but who does actually strive to

do the deeds; who knows great enthusiasms, the great devotions; who

spends himself in a worthy cause; who at the best knows in the end the

triumph of high achievement, and who at the worst, if he fails, at least

fails while daring greatly, so that his place shall never be with those cold

and timid souls who neither know victory nor defeat.”

- Theodore Roosevelt

ALWAYS REMEMBERAND THEN

I FOUND

MY HERO.