How CISOs Stay On Top of Cyber Trends While Ignoring Vendor Emails

How CISOs Stay On Top of Cyber Trends While Ignoring Vendor Emails

CISO | Security Vendor Relationship Series

This week's episode of Defense in Depth

How CISOs Discover New Solutions

Defense in Depth: How CISOs Discover New Solutions

 On this episode of Defense in Depth:

Co-host Allan Alford, CISO of Mitel, and our guest Yaron Levi, CISO, Blue Cross and Blue Shield of Kansas City, discuss the following:

  • The two tactics of carpet bombing with marketing emails and cold calls are universally hated, but they must produce results and that's why they continue.

  • If a CISO wants to discover new solutions, they must expose themselves somehow to what's out there. New solutions aren't magically going to land in your lap.

  • Many CISOs rely on their networks of CISOs but that can limit your thinking if none of the CISOs are willing to venture outside of the group.

  • Don't rely on your own discovery. Task your staff members to do it as well. Encourage and reward the showing of new ideas to the group which can and will foster disruption and innovation.

  • Your trusted partner should be proactive about giving you quarterly updates.

  • Engage in smaller local conferences where you can meet and build trust with your local experts.

  • Best advice for CISOs was to create a form for vendors to fill out if they want the chance to meet with you.

Special thanks to this week's Defense in Depth podcast sponsor, ComplianceForge.

ComplianceForge

ComplianceForge is a business accelerator. ComplianceForge offers a full-stack of cybersecurity documentation that ranges from policies and standards, to controls, metrics, procedures and program-level documentation to provide evidence of due diligence in managing risk, vulnerabilities, secure design and other pertinent areas that requires clear and concise documentation.

Hemanth Srinivasan, Sr. Manager, AppSec, Autodesk on vulnerability management

We Came, We Saw, We Deconstructed the DBIR 

Don't worry! Even if you didn't get a chance to participate in yesterday's webinar where all CISO Series podcast hosts (myself, Mike Johnson, and Allan Alford) and Alex Pinto, head of Verizon Security Research, discussed yesterday's release of Verizon's Data Breach Investigations Report, you can still listen and watch it now ON DEMAND.

Taylor Lehmann, CISO, Wellforce on security industry solving problems

SUBSCRIBE TO BOTH PODCASTS

Go ahead and click on any of these links to subscribe to the podcast feed of your favorite podcast catcher.

If you're already a subscriber, THANK YOU! If you like either or both shows, please tell all your friends on social media and write a review on iTunes.