CFH #6 – Candy Alexander

Sometimes it feels like security professionals and business leaders are speaking different languages. That's why it's critical for managed security providers to communicate with their clients' financial decision-makers in a business-aligned manner that conveys how cybersecurity can help advance and protect the company's corporate interests. This featured topic will identify strategies for translating infosec concepts into business objectives, avoiding confusing cyber jargon, finding cyber champions on your client's payroll who can amplify your message, and blocking out external forces and influences that muddle your message.

No matter how well constructed an MSSP's security architecture is, or how tight its security controls are -- all that good work can be wasted or sabotaged far too easily when the client organization fails to follow standard cyber security hygiene practices. Just because a company uses a managed security provider to bolster its cyber preparedness doesn't mean they still don't have a responsibility to promote security awareness across their workforce and institute some basic cyber governance policies. In this segment, Cyber for Hire will seek to identify and find potential solutions for addressing users' key security awareness failings because at the end of the day, security must be a two-way street.