Executive Cybersecurity with Dave Tyson
One of the industry's most decorated CISOs, Dave Tyson served at SC Johnson, Pacific Gas and Electric, and led eBay's security, all before taking on his role as president of Apollo Information Systems. Executive Cybersecurity is Dave's direct conversation with boards and executives about how to handle the challenges they face as an organization and their role in building a culture of security in everything they do.Short and practical, Executive Cybersecurity with Dave Tyson gives you direct access to the latest in cybersecurity thinking and strategy.
Executive Cybersecurity with Dave Tyson
Cultivating Experience in Security
•
Dave Tyson
•
Season 1
•
Episode 2
- The number one reason why cyber security programs fail is the business is misaligned or completely missing cyber security strategy.
- How much you spend on cyber security does not reflect the level of your protection, it is how and what you focus on and the expertise it is executed with.
- The amount others spend does not inform your comparative protection with others’ level of protection. – Gartner 2021 (Benchmarking is not a good comparison)
- Get a real cyber security pro who is ruthlessly focused on the business’s success, and protection, IT, compliance, and privacy will follow as a byproduct.
- Do not expect IT to solve this issue, Cyber is a business issue and must be located there to effectively develop the right strategy.
- Cast out all turf, sacred cows, and organizational limits – align cyber priorities directly with business decisions and priorities – in the same breath as a major business decision, the cyber risk issues should be a strategic component.
- The right advisor can cut through the noise, get rid of the IT speak, and align your security strategy directly to the business – it's business expertise combined with cyber security understanding that creates the right strategic thinking and advice.
- The board’s role should focus on strategic goals, to do this, they need to have clarity on the investment worth crown jewels of the company and the realistic threats against them.
- Hackers love budget restrictions, project delays, and other business decisions that make it easy for them to hack you. Your strategy needs to be dynamic and support daily decision-making on changing risk issues.
