~/talk

The Emperor Has No Clothes: the Current State of the CISO

Talkat RSA Conference 2023 · 2023-04-24..04-27· [security]
links:none on file
links:none on file
slides:none on file

Claim: most CISOs carry a high-sounding title with no authority and frequently report under CIOs or sit outside executive teams; evidence includes company leadership pages (only ~13% show CISOs) and a survey where 12 of 321 CISOs sit on boards. Patterns: rise of fractional CISO roles, vendor-side CISO evangelists, product CISOs after supply-chain incidents, and startups prioritizing resilience over prevention. Two urgent skills are risk forecasting (better than vague FAIR theory use) and embracing DevSecOps.

AI-written summary · about

  1. 0:00Introduction and disclaimers
  2. 2:48CISO role reality check
  3. 10:34Evidence of CISO importance
  4. 16:19CISO board reporting trends
  5. 21:40History of CISO evolution
  6. 32:38Cambrian era of CISO roles
  7. 42:38Current CISO role reassessment
  8. 47:59Future of CISO positions
  9. 50:10Q&A on board roles
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.