CISO Strategy: Page

Internet security protocol bodies ISOC, OTA announce merger

The two leading internet security protocol bodies, Online Trust Alliance and Internet Society, merge to work for improved IoT security and online security.

By Peter Loshin • April 5, 2017

Outsourcing security services rises as MSSPs focus on industries

Despite increasing levels of specialization, managed security service providers often don't understand the business you're in. That may be changing.

By Kathleen Richards • April 3, 2017

Encryption debate needs to be nuanced, FBI’s Comey says

FBI Director James Comey brought the encryption debate back to the forefront by asking for a 'nuanced and thoughtful' conversation on the topic before there is a serious attack.

By Michael Heller • March 24, 2017

Can CISOs facilitate peace between privacy and information security?

Privacy and information security can often be at odds with each other in enterprises. Expert Mike O. Villegas explains how C-levels can help to get the two to work in harmony.

By Mike Villegas • March 16, 2017

What effect does a federal CISO have on government cybersecurity?

The brief tenure of a federal CISO in the U.S. government recently came to an end. Expert Mike O. Villegas discusses the effect this has on the U.S. cybersecurity posture.

By Mike Villegas • March 14, 2017

Experts: Government Vulnerabilities Equities Process should be law

Experts say codifying the Vulnerabilities Equities Process into law would increase transparency and trust regarding vulnerability disclosure by the government.

By Michael Heller • Feb. 24, 2017

Understanding of security remediation differs for CISOs, researchers

One expert warned there can be a disconnect between what security remediation means to CISOs and what researchers announce because of divergent objectives.

By Michael Heller • Feb. 22, 2017

Experts debate national cybersecurity policy suggestions at RSAC 2017

Experts at RSAC 2017 discussed national cybersecurity policy suggestions for the new presidential administration, including what to do about encryption and the DHS mission.

By Michael Heller • Feb. 16, 2017

How does a security portfolio help an enterprise security program?

A security portfolio shouldn't be used as an alternative to a reporting structure, but it can still be beneficial to enterprises. Expert Mike O. Villegas explains how.

By Mike Villegas • Feb. 16, 2017

RSA Conference speakers tackle tech immigration reform, travel ban

Several speakers made pro-immigration remarks at RSA Conference 2017 and called for tech immigration reform following President Trump's controversial executive order.

By Rob Wright • Feb. 16, 2017

Upcoming cybersecurity executive order leaves RSAC experts optimistic

Experts at RSAC 2017 discussed the upcoming cybersecurity executive order from the new presidential administration and how the NIST Framework strengthens the plan.

By Michael Heller • Feb. 15, 2017

RSA panel covers cryptography trends, elections and more

Panel at RSAC on cryptography trends offers views on AI's coming domination of cybersecurity, quantum computing and quantum cryptography, politics and elections and more.

By Peter Loshin • Feb. 14, 2017

Ramzan advocates collaborative security in RSAC keynote

Zulfikar Ramzan opens RSA Conference 2017 by reminding enterprises that just as cyberattacks have long-tail repercussions, so too do collaborative security decisions made in business.

By Michael Heller • Feb. 14, 2017

RSA President Rohit Ghai details new cybersecurity platform at RSAC 2017

Michael Dell introduces RSA's newly appointed president, Rohit Ghai, who is set to lead the cybersecurity firm as it implements its new Business Driven Security platform.

By Peter Loshin • Feb. 14, 2017

Who should be on an enterprise cybersecurity advisory board?

What qualifications does a cybersecurity advisory board member need to best serve enterprises? Expert Mike O. Villegas outlines the most helpful backgrounds for board members.

By Mike Villegas • Feb. 13, 2017

Trump tells White House cybersecurity officer, ‘You’re fired’

Rumors have been confirmed that President Trump has fired the White House cybersecurity officer in charge of making sure he and his staff are not hacked.

By Michael Heller • Feb. 10, 2017

Experts debate effects of government cybersecurity executive order

A leaked version of a draft of a government cybersecurity executive order from President Trump has experts debating the effects such an order would have.

By Michael Heller • Feb. 3, 2017

Role of CISO: FICO enlists CISO in security product management

As head of FICO's information security program, Vickie Miller's role is wide-ranging.

By Alan Earls • Feb. 1, 2017

Uncharted path to IT and compliance with Digital River’s Dyann Bradbury

Bradbury chats with Marcus J. Ranum about her early interest in computers and her unexpected career path to head of global compliance for an e-commerce provider.

By Marcus Ranum • Feb. 1, 2017

RSA Conference 2017 “not impacted” by Trump’s executive order

RSA Conference 2017 hasn't been affected by President Trump's recent executive order, but the travel ban has still send shockwaves through the tech industry.

By Rob Wright • Jan. 31, 2017

RSAC 2017 Innovation Sandbox highlights top 10 cyber startups

RSAC 2017: Innovation Sandbox competition pits this year's top 10 cybersecurity startups against each other in a bid to win top honors as most innovative.

By Peter Loshin • Jan. 31, 2017

When not to renew a vendor contract due to security issues

Opting out of a vendor contract for security reasons can be a tough decision for CISOs. Expert Mike O. Villegas discusses how NASA handled the situation and what CISOs can do.

By Mike Villegas • Jan. 26, 2017

Future of the federal CISO position in question as Touhill steps down

Retired Brig. Gen. Gregory Touhill stepped down as the federal CISO, leaving questions surrounding the future of the position and the work he has done.

By Michael Heller • Jan. 20, 2017

What effect does FITARA have on U.S. government cybersecurity?

FITARA became a law in 2014, but government cybersecurity continues to struggle. Expert Mike O. Villegas discusses the effects of the law.

By Mike Villegas • Jan. 12, 2017

Want a board-level cybersecurity expert? They’re hard to find

Members of the board must be ready to defend their fiduciary decisions, corporate policies, compliance actions and, soon, cybersecurity preparedness.

By Alan Earls • Nov. 1, 2016