弥合差距——BISO 的行动指南.pdf

1、Bridging The GapThe Playbook of a BISOJordanne BarrettAbout MeSeasoned Cybersecurity and Privacy professional and the founder of Cybarr Security Group,a cybersecurity consulting firm and education platform.With over a decade of experience in the Governance,Risk,and Compliance(GRC)domain,Ive made sig

2、nificant strides in building robust cybersecurity GRC programs.My expertise includes developing policies,conducting risk assessments,and crafting compliance strategies that align with organizational objectives.“Im no longer accepting the things I cannot change Im changing the things I cannot accept”

3、-Angela DavisBISOPlaybookSTEP 03 Steps to Align Security with CultureSTEP 02 The Role of the BISO in Shaping Security CultureSTEP 01 Understanding Organizations CultureSTEP 04 Overcoming ChallengesSTEP 05 Measuring SuccessSTEP 06 Keep Going!How can we access cultural readiness.How do we define organ

4、izations culture?How culture influences security successUnderstanding Organizations CultureUnderstanding Organizations Culture What is Organizational Culture?The shared values,beliefs,and behaviors that shape how employees interact,make decisions,and approach their work.Culture influences how securi

5、ty initiatives are received Why Culture Matters in Security?Aligning security culture and policiesReducing friction that can create friction and cause non-compliance.Higher engagement and lower security incidents.How to Measure Cultural Readiness for Security?Conducting internal surveys Hold intervi

6、ews with department leads to gain an understanding of their friction points.04Specific goals and mission of the businessAdjusting communication based on audience.Tailoring Messages to Align with Business01Understanding what security teams focus on(e.g.,Audit,Vulnerabilities,Compl