It notes pressures on CISOs include the facts that many companies are pulling back cybersecurity spending because of the economy, cyber attacks are increasing, regulators are breathing down the necks of companies, and the rise of generative AI tools offer new opportunities for advanced threat detection and automation, but also pose new threats in themselves.<\/p>\n
“In this rapidly evolving landscape, traditional CISO role characteristics may no longer suffice,” says the report. “This situation gives CISOs an unprecedented opportunity to argue for a place in the executive ranks. Furthermore, the increased security pressure on organizations gives CISOs more ammunition to influence leaders outside of their direct sphere of control.”<\/p>\n Among the findings: The report argues that the U.S. Securities and Exchange Commission’s updated cybersecurity reporting rules, and the increased exposure that CISOs face, call for strong collaboration between the CISO and company leadership, including the board. That includes regular and recurring CISO-board collaboration in the form of quarterly updates, tabletop exercises and the like.<\/p>\n For half of the respondents, this is the case at their organization. However, a quarter of the respondents said board access is limited to just once or twice a year. Twelve per cent said they meet with the board purely on an ad hoc basis. But 13 per cent said they never see the board.<\/p>\n “Even among companies with annual revenue exceeding US$10 billion \u2014 most of which are publicly listed firms \u2014 just 60 per cent of respondents said they meet with the board regularly,” says the report.\u00a0 Director-level CISOs are the least likely to have quarterly recurring board engagement.<\/p>\n The report warns that for CISOs to effectively communicate demands for risk guidance and budget needs with their board, they need: The post CISOs are both anxious and see opportunities: Report<\/a> first appeared on IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" In the face of increasing pressure job satisfaction of CISOs fell compared to the previous report. But opportunities are increasing<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[18,1220,15,16],"tags":[523,391,396,393,275],"class_list":["post-43647","post","type-post","status-publish","format-standard","hentry","category-careers-education","category-it-leadership","category-leadership","category-security","tag-ciso","tag-di","tag-postmedia","tag-security-strategies","tag-top-story"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/43647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=43647"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/43647\/revisions"}],"predecessor-version":[{"id":43693,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/43647\/revisions\/43693"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=43647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=43647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=43647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Graphic](\"https:\/\/i.itworldcanada.com\/wp-content\/uploads\/2024\/01\/Graphic-from-IANS-Research-CISO-Report-Jan-2024.jpg\")
\n— <\/strong>Compared with 2022, CISO job satisfaction fell \u2014 a sign of unease with the status quo. The drop in satisfaction coincides with a growing share of CISOs considering a job change (75 per cent considering a change, up from 67 per cent in the previous study);
\n— <\/strong>This may have something to do with lack of recognition. While 63 per cent of respondents said they have a VP or director-level position, just 20 percent are at the C-level;
\n— <\/strong>CISOs seeking clear risk guidance from boards often don\u2019t find it. Only 36 of the respondents said their board offered clear guidance on their organization\u2019s risk tolerance for the CISO to act on;
\n— <\/strong>One bright spot: There’s evidence that spending time enhancing leadership skills through external training pays off. CISOs who engaged in formal leadership training courses or one-on-one executive coaching programs earn more, with a difference of over US$200,000.<\/p>\nRelated content: Advice to CISOs: Shut up and listen<\/strong><\/a><\/h4>\n
\n— <\/strong>business acumen, meaning the ability to understand corporate strategy and financial statements as well as the ability to frame risks in terms of possible economic impact on the organization;
\n— <\/strong>and executive presence, which is the ability to be persuasive, direct and decisive with the board and C-suite.<\/p>\nRelated content: Empathy is now a key skill CISOs need<\/strong><\/a><\/h4>\n