CSO Executive Sessions

"We're [CSOs] all focused on this balance of being able to reduce risk while enabling the business," says Lionbridge CSO & CPO Doug Graham. But, he adds, "There's no real hard-and-fast rules about how much risk and what that recipe is." For Graham, the most concerning part about the CSO role isn't that there aren't any hard-and-fast rules about the right recipe for risk; instead, it's "making sure you've presented all the options and you haven't missed something…. Am I presenting the balance right to the rest of the leadership team so we that can make sensible decisions that are right for the company?" As for how Graham makes sure he's getting the most out of his security technology investment, "it's a case of defining our controls, measuring their coverage, and measuring their effectiveness," he says. "And I think that gives you two very simple metrics. What's my coverage? And what's the effectiveness of my controls?"

Produced by IDG Communications, Inc.

As more organizations move to the cloud and to continuous deployment, security needs to “follow the ‘as code’ model,” says Marnie Wilking, global head of security & technology risk management at Wayfair. Where historically security engineers and analysts needed to be familiar with tools and implementations for an on-prem environment, the shift to the cloud requires a new set of skills. “If we really want to be able to succeed as security as code, then we need to hire people who can write code,” says Wilking. Her aha moment came when a colleague commented about building a team based on DevOps principles: “it made their team really successful within their business because that was the business model they were following.”

Produced by IDG Communications, Inc.

Bob Litterer, VP and CISO of biotech giant Biogen, isn’t a worrier at heart, but there are a few things that keep him up at night. High on that list is the interdependencies in his company’s third-party network; a data breach anywhere in that ecosystem could have a devastating ripple effect. Also topping Litterer’s list of worries are the exposed underbelly of operational technology and cloud sprawl, which can leave organizations with more exposure than they may realize. Produced by IDG Communications, Inc.

Join CSO publisher Bob Bragdon for a new audio podcast series, CSO Executive Sessions which will feature conversations with leading security and risk executives from around the country about the challenges faced by their organizations.

You'll hear from some of the best minds in security about what keeps them up at night -- from the ever-present threat of data breaches to growing cloud sprawl vulnerabilities. Also top of mind for these leaders in 2020 is a renewed emphasis on privacy as part of risk calculations and the demand for a new set of security skills to keep pace with the shift to the cloud.

Learn how these executives drive the security agenda within their organizations and build their leadership skills in a field that moves at break-neck speed. What better way to prepare for the year ahead than to hear from infosec leaders sharing their priorities and strategies.

Subscribe to this podcast on Apple Podcasts, Google Play or Spotify by 1/22/2020 to be the first to listen. 

Produced by IDG Communications, Inc.