When a major security incident, such as the recent massive Equifax data breach, grabs headlines, CEOs start asking more questions about data security.
CISOs need to be thinking about their answers to critical questions the CEO is likely to pose.
Information Security Media Group asked seven security experts what questions they believe CEOs should be asking CISOs, and what information CISOs should arm themselves with to be prepared to provide answers. Following are eight questions and the experts’ suggested responses.
1. We have been investing in cybersecurity for a few years now. Would you say our organization is secure?
Israel Bryski, vice president, technology risk, Goldman Sachs: To pre-empt this question, the CISO should have a conversation early on with the CEO to determine the organization’s risk appetite. This will allow the CISO to align and prioritize security initiatives accordingly.