Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Careers & People

1/19/2016
10:10 AM
Marilyn Cohodas
Marilyn Cohodas
Commentary
Connect Directly
Twitter
LinkedIn
RSS
E-Mail vvv
50%
50%

Dark Reading Radio: A New Job Description For the CISO

As cyberattacks grow and evolve, so too has the role of the chief information security officer. Fascinating discussion on key trends and challenges.

If you were writing a new job description for the Chief Information Security Officer of your company, what would you say? The job today goes well beyond simply maintaining a secure perimeter around corporate data. And the level of responsibility has moved from the confines of the datacenter all the way to the corporate board room.

In our next episode of Dark Reading radio, we’ll explore the challenges facing the modern CISO and the skills security leaders will need to conquer them -- today and into the future. Our guests are Jon Allen, the assistant vice president and CISO at Baylor University and Owanate Bestman, cyber security executive recruiter at Barclay Simpson.

Allen brings us the perspective of the CISO, starting with his initial IT security job at Baylor in 2003, which he grew from a one-person shop to a much larger, integrated security organization within the university system. Bestman will provide real-world advice about infosec staffing needs and trends from his work as an infosec headhunter advising CISOs, heads of security, and human resource departments. Among the topics we’ll explore:

  • How the CISO role has changed: what should be in a modern job description
  • The board room: do CISOs really have a seat at the table and what issues predominate the discussion.
  • Hiring and staff development: essential skill sets, both soft and technical
  • The technical toolbox: must know technologies versus ability to learn, think and innovate
  • Getting the word out: what users, business departments and execs don’t understand about security, and how to educate them.

I hope you'll join our show and offer your insights and opinions to the conversation. But if you missed the event, you can check out the broadcast and live chat from our Dark Reading Radio archives. 

 More on this topic:

Marilyn has been covering technology for business, government, and consumer audiences for over 20 years. Prior to joining UBM, Marilyn worked for nine years as editorial director at TechTarget Inc., where she launched six Websites for IT managers and administrators supporting ... View Full Bio
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Stop Defending Everything
Kevin Kurzawa, Senior Information Security Auditor,  2/12/2020
Small Business Security: 5 Tips on How and Where to Start
Mike Puglia, Chief Strategy Officer at Kaseya,  2/13/2020
Architectural Analysis IDs 78 Specific Risks in Machine-Learning Systems
Jai Vijayan, Contributing Writer,  2/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-1811
PUBLISHED: 2020-02-18
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.
CVE-2020-1815
PUBLISHED: 2020-02-18
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while parse...
CVE-2020-1816
PUBLISHED: 2020-02-18
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attacker...
CVE-2020-1830
PUBLISHED: 2020-02-18
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This cause...
CVE-2020-1882
PUBLISHED: 2020-02-18
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 vers...