Chief information security officers discuss the importance of getting data security right in a report for CSO. “CISOs have an incredibly difficult job in that they are responsible for something they can never provide 100 percent assurance on, i.e., securing the enterprise,” a former InfoSec head said. “All it takes is one missed vulnerability, one insider or one accidental ‘insecure’ process.” Sometimes, a CISO’s dismissal is for failing to determine risks or other vulnerabilities, the report states. One information governance head saw two firings both “mostly centered about [an] inability to address risk to a satisfactory state and in an economical manner,” she said.
Full Story