Many CISOs complain of communication problems with their business. They are not being listened to. They are not getting the budget they think they should get. They feel their business prioritises against security too often.
It has been a recurring theme amongst information security professionals for the best part of the last 15 years, and it is rooted in a wide range of factors, amongst which the profile of the CISO is often a dominant limitation.
Business improvements and customer experience are topics that are very close to my heart. Driving business improvements is my core capability. Delivering better customer experience through improvements is something that I am passionate about.
Over the past 6 months I have seen many instances where organizations have failed to take advantage of opportunities; lost market-share; put their brand at risk; or wasted resources; resulting in loss of revenue and/or additional costs.
Given that August is a quiet month, it has provided me with time to reflect on some of the problems that I have experienced and them with you so that you might learn from some of these outcomes.
So here goes: