A Candid CyberSec Conversation With Kim Crawley | Candid CyberSec Podcast With Vandana Verma

According to our guests, cybersecurity leaders who experience the following symptoms fail to convince business leaders that cybersecurity risk is, in fact, business risk:

• Failure to garner trust from executive leadership
• Mis-aligned expectations around risk appetite and capital allocation
• Misperception of cybersecurity's role in the business
• Demoralization of your team in the face of cyber risk acceptance
• Increased stress and anxiety from managing an underfunded program

Rock Lambros and Matthew Sharp have had many years of experience performing and analyzing the CISO role. With their combined knowledge, they decided to write a book—to craft a new guide, if you will—describing what the next evolution of the CISO must be about. In short, the change must result in the creation of a business-minded executive—even more so than the individual having a strong technical background.

However, as with many things in life, it's not always just about reaching the end to produce a specific result. More often than not, it is about the journey to get there, continuing to learn along the way, and paying all of that forward as the final outcome is pursued.

We chat with Rock and Matthew about their passion, the book purpose, and the writing process. Just as you might recommend to someone in (or entering) a CISO role, they are following some of their own advice along this journey:

• Break out of their own silos to capture the depth of knowledge of both the CISO and business communities
• Ditch preconceptions and outdated assumptions that may hold back this transformation; not just in terms of timing but also in scope
• Move beyond presenting the "how" and "why" as separate elements. With stories, CISOs can both relate to AND implement against

To this end, Rock and Matthew suggest that the internal battlefield for the new CISO is won on the following 3 fronts:

• Foundational Business Knowledge
• Communication & Education
• Leadership

Join us as we uncover what it takes to truly understand a topic such that it can be written about in a published piece of work. There's more to it than meets the eye, and the learnings from a well-formed book could provide those nuggets this role needs to transform and succeed now, and into the future.

Guests
Kyriakos "Rock" Lambros, CEO and Founder, RockCyber (@rocklambros on Twitter)

Matthew Sharp, CISO, Logicworks (@Matthew_K_Sharp on Twitter)

This Episode’s Sponsors:

Nintex: https://itspm.ag/itspntweb

Imperva: https://itspm.ag/imperva277117988

RSA Security: https://itspm.ag/itsprsaweb

To see and hear more Redefining Security content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-security

Are you interested in sponsoring an ITSPmagazine Channel?
https://www.itspmagazine.com/podcast-series-sponsorships