Ashley Rose – BSW #309
The Gartner definition of integrated risk management is a set of practices and processes supported by a risk-aware culture and enabling technologies, that improves decision making and performance through an integrated view of how well an organization manages its unique set of risks. Enterprises typically have a broad coverage of the risks that face the business including cybersecurity risk, however, its 2023 and after more than a decade of requiring training compliance for our people, the Verizon DBIR reports this year that 74% of breaches involved human error. It's clear that compliance is not the answer for where to include the human in an IRM strategy, so what's next? In the leadership and communications section, Only one in 10 CISOs today are board-ready, study says, Why Conflicting Ideas Can Make Your Strategy Stronger, How to Overcome Communication Barriers in Your Teamwork, and more!
This segment is sponsored by Living Security. Visit https://securityweekly.com/livingsecurity to learn more about them!
Visit https://www.securityweekly.com/bsw for all the latest episodes!
Follow us on Twitter: https://www.twitter.com/securityweekly Like us on Facebook: https://www.facebook.com/secweekly
Full Audio
Segments
1. Where is the Human in Your Risk Management Program? – Ashley Rose – BSW #309
The Gartner definition of integrated risk management is a set of practices and processes supported by a risk-aware culture and enabling technologies, that improves decision making and performance through an integrated view of how well an organization manages its unique set of risks.
Enterprises typically have a broad coverage of the risks that face the business including cybersecurity risk, however, its 2023 and after more than a decade of requiring training compliance for our people, the Verizon DBIR reports this year that 74% of breaches involved human error. It's clear that compliance is not the answer for where to include the human in an IRM strategy, so what's next?
This segment is sponsored by Living Security. Visit https://securityweekly.com/livingsecurity to learn more about them!
Sponsored By
Announcements
Join our Discord channel to chat with our hosts, ask questions, customize livestream alerts, and more! Visit securityweekly.com/discord to receive an invite.
Guest
As the CEO and Co-founder of Living Security, Ashley Rose is the driving force behind Living Security’s push to lead the Human Risk Management industry. She has successfully raised more than $25 million in funding to scale the business, pivoted the company from solely in-person training to a fully digital platform, and has led the company to be named an industry leader in the Forrester Wave. She is a serial entrepreneur with experience designing and managing product lines. She co-founded Living Security based on the philosophy that empowering people is the best approach to lasting security behavior changes and breach prevention. She is an industry thought leader, sharing her unique perspective on the evolution of cybersecurity with various publications including Forbes, TechRepublic, Darkreading, Security Magazine, CyberWire and Cybersecurity Ventures.
Hosts
2. Board-ready CISO?, Conflicting Ideas Lead 2 Stronger Strategy, Overcome Comm Barriers – BSW #309
In the leadership and communications section, Only one in 10 CISOs today are board-ready, study says, Why Conflicting Ideas Can Make Your Strategy Stronger, How to Overcome Communication Barriers in Your Teamwork, and more!
Announcements
Join us at an upcoming Official Cyber Security Summit in a city near you! This series of one-day, invitation-only, executive level conferences are designed to educate senior cyber professionals on the latest threat landscape.
We are pleased to offer our listeners $100 off admission when you use code SecWeek23 to register.
Visit securityweekly.com/cybersecuritysummit to learn more and register today!
Hosts
- 1. Only one in 10 CISOs today are board-ready, study says
Even though there is a growing demand for cybersecurity expertise at the highest levels of business, a significant number of public companies lack even one qualified cybersecurity expert on their board of directors, according to a study by cybersecurity research and advisory firm IANS. In addition, the study found that just a little more than one in 10 CISOs have all the key traits thought to be crucial for success on a corporate board.
- 2. How Three CISOs Make the Business Case for Cybersecurity
The CISO role was once “niche” – about keeping an organization secure. The role has become one where they must both keep security nailed down and help ensure the business is securely and intelligently leveraging data and technology.
With this dramatic shift in focus comes the need for CISOs to understand the business from top to bottom, and to develop – refining on an ongoing basis – that now-essential skill: communicating the whats and whys of their vision and evolving security program.
- 3. Cyberinsurance Prices Moderate as Premium Hikes Slow
Two reports focused on the cyberinsurance market found prices continued to moderate in the first quarter of 2023, according to the Global Insurance Market Index from Marsh. Average price increases rose by just 11% compared with 28% increases during the fourth quarter of 2022.
A Fitch Ratings report found a decline in ransomware incidents helped slow the rise of premiums for stand-alone cyberinsurance, although they still rose by 62%. The report noted pricing was likely to further moderate in 2023 due to competitive factors and an improvement in cyberhygiene.
- 4. Cybersecurity Summer Reading: 11 Books to Boost Your Career
To help tech and security pros build out their summer reading for the next three months (whether it’s a beach read or a digital download during a staycation), Dice asked a group of cybersecurity executives and industry watchers what they’re reading this summer. In addition to their reading list, experts shared their current thinking about how the cybersecurity field is evolving and what skills are needed to keep up.
- 5. Why Conflicting Ideas Can Make Your Strategy Stronger
In a volatile, uncertain world, successful strategies are those conceived as portfolios of options rather than as roadmaps. But to successfully create and communicate such strategies, managers must embrace incompatible and misaligned ideas, communicate multiple and conflicting narratives, and share ideas as they think of them as opposed to the traditional sequence of thinking then sharing. To enable this, leaders need to foster a culture in which people can disagree without being punished for it.
- 6. How to Overcome Communication Barriers in Your Teamwork
When it comes to effective communication, various barriers can get in the way. Let’s take a closer look at some of these barriers and how to overcome communication barriers:
- Physical Barriers
- Psychological Barriers
- Semantic Barriers
- Cultural Barriers
- Technological Challenges
- Time Zone Differences
- Lack of Visual Cues and Context
