Qualified Opinions – BSW #190

Matt Alderman

1. Information Security Forum Research Demonstrates Importance of the Next Generation CISO
   There are many other factors in the make-up of the next-generation CISO, however, they stand out as key differentiators of forward-looking professionals. The six differentiating characteristics include: • Balancing Opportunity with Risk • Demonstrating Leadership • Managing Incidents and Crises • Finding Their Own Voice • Dealing with Regulatory Volume • Handling Technology
2. What it takes to be a transformational CISO
   What exactly, though, does a transformational CISO possess that sets him or her apart? That allows him or her to “love” the hard work of overhauling and rebuilding? There are a number of traits and characteristics that define such a leader: 1. A transformational CISO is energized by change and disruption, and they’re energetic in general. 2. They’re comfortable operating in chaos. 3. They’re dynamic and adaptable. 4. They’re outspoken and persuasive, they tend to be more extraverted, and they’re able to build consensus. 5. They have to be able to do a bit of sales, and they have to be able to fit security into the rest of the company’s journey.
3. Put Your Metrics Where Your Mouth Is
   You’ve no doubt heard the saying “what gets measured gets managed.” And it’s true. Why? Because what gets measured, gets noticed. CEOs and other executives respond to what boards and shareholders notice.
4. 5 Simple Ways to Make Better Decisions
   Here are five strategies that will help you to make better, faster decisions: 1. Fewer options = better decisions. 2. Earlier is better. 3. Fewer people make better decisions than big groups. 4. Sleep on it. 5. Toss the coin.
5. CIOs say security must adapt to permanent work-from-home
   Both private- and public-sector CIOs see many more employees permanently working remotely, and say security needs to adapt to new threats and how they communicate.
6. To Succeed in a Negotiation, Help Your Counterpart Save Face
   To understand the critical nature of face to negotiation success, consider these three cases: 1. Afghanistan – Freeing Hostages 2. Calgary – A Crisis Negotiation 3. Brazil and France – A Business Tug-of-War
7. Department of Treasury releases advisory on potential sanctions risks for facilitating ransomware payments
   The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) is issuing an advisory to alert companies that engage with victims of ransomware attacks of the potential sanctions risks for facilitating ransomware payments. This advisory highlights OFAC’s designations of malicious cyber actors and those who facilitate ransomware transactions under its cyber-related sanctions program. URL to the advisory: https://home.treasury.gov/system/files/126/ofac_ransomware_advisory_10012020_1.pdf