Security-Culture on Rishipal Yadav · not your CISO

So You Do Not Want to Become a CISO Anymore?

Sun, 09 Oct 2022 00:00:00 +0000

This article was originally published on not your CISO on Medium. Read the full post →

There has been quite a chatter in the security community for the last couple of weeks. It is always some discussion — be it a new breach, a new framework, or a regulatory shift — but this one felt different.

The conversation: is the CISO role broken? Between the SolarWinds aftermath, the SEC charging CISOs personally, the expectation of omniscience with the authority of a middle manager, and the burnout rates — a lot of security professionals who once had the CISO job as their north star are quietly reconsidering.

Educate Your Team — Do Not Chase When It Comes to Security

Mon, 05 Sep 2022 00:00:00 +0000

This article was originally published on not your CISO on Medium. Read the full post →

“Hey, could you please complete the security training, it was due two days ago?”

If that message sounds familiar — either as the person sending it or the one ignoring it — your security awareness program has a problem. And the problem isn’t that people are lazy or don’t care about security. The problem is that you’ve built a compliance exercise and called it a culture.

Back to Office: But What About Security?

Thu, 28 Jul 2022 00:00:00 +0000

This article was originally published on not your CISO on Medium. Read the full post →

Things are back to normal, and everyone is returning to their offices. Some are ecstatic about free food, coffee, and office gossip. Others are dragging their feet. And most security teams are somewhere in between — quietly aware that two years of remote-first work has created some habits that don’t translate well to shared physical spaces.