View this email in your browser

This week's episode of CISO/Security Vendor Relationship Podcast

Getting Over Our "Security ≠ Compliance" Obsession

On

this week's episode

, Mike Johnson and our guest, Chris Hymes, head of information security, enterprise IT, and data protection officer, Riot Games, makers of League of Legends, discussed:

Security people often don't realize that compliance is a different industry.

While security people like to puff up their chest and tout that just because you're compliant it doesn't mean you're secure, the flip side is also true. A great security program isn't necessarily going to be compliant.

Compliance is a business enabler.

Far too many security people look down on compliance. But if you're not compliant, you can't even be in business.

You can't do it all yourself.

All security professionals know they need partners and with that you're going to have third-party risk. A program to manage your third-party risk is critical. Start by building a strong relationship with your legal and finance team and get a clear understanding of how approvals flow through the company.

When your business is not in a hostile environment, test with others' misfortune.

You'll still need to see how quickly you can remediate a breach or malware outbreak even if you don't see that much activity. Use the latest news of attacks as a guide to conduct tabletop exercises to see how you'd respond.

Special thanks to this week's CISO/Security Vendor Relationship Podcast sponsor, Expel.

Expel

is flipping today’s managed security model on its head (Ouch!) for on-prem and cloud, taking a technology-driven approach that lets analysts focus on what humans do best: exercise judgment and manage relationships. The company offers 24x7 monitoring through its security operations center-as-a-service, using the security tools customers already have.

In two days, our live audience recording in NYC

This is it New Yorkers, your final reminder. We've got a great event lined up for Thursday, September 5th, 2019. Go register. The evening begins at 6:00 PM ET.

SUBSCRIBE TO BOTH PODCASTS

Go ahead and click on any of these links to subscribe to the podcast feed of your favorite podcast catcher.

• iTunes

• Spotify

• Stitcher

• RSS Feed

• iTunes

• Spotify

• Stitcher

• RSS Feed

If you're already a subscriber, THANK YOU! If you like either or both shows, please tell all your friends on social media and write a review on iTunes.