Afew years ago we published an article on security related certifications that were being marketed as a means to advance your career. At that time there were a relatively small number of certifications that we were seeing listed on resumes. Today, we are still routinely asked which certifications are needed for career advancement or which ones are being requested by hiring managers. Frankly, unless the role has a specific requirement that connects to one of the more technical certifications, for the most part, the hiring authorities are not demanding them.
Somewhere in the planning of the Security 500 Conference, I realized it would not be possible to turn the long list of security’s responsibilities from this year’s benchmark study into a readable slide. Nor was it prudent to punish our attendees with multiple lists of unmemorable threats and vulnerabilities. With more than 50 unique items in play; from managing investigations (97 percent) to overseeing insurance (15 percent); the business executives that manage risk and security for their enterprises all expressed this common theme:
Security veteran Mike Denning will oversee seven SOCs and more than 500 employees worldwide.
October 20, 2014
Mike Denning has joined Verizon Enterprise Solutions as the vice president of global security. In this role, he will be responsible for overseeing Verizon’s global security business, where he will manage more than 500 employees around the world, seven global Security Operations Centers (SOCs), the Verizon Cyber Intelligence Center (VCIC), the product management and development organization and security sales operations, a Verizon press release says.
Over the past year, the Infosec Team in Cisco’s Threat Response, Intelligence and Development group launched a Unified Security Metrics (USM) program as a way to make sense of volumes of network data and reduce security risk.
At some point during your career you will find yourself interacting with a search firm and/or a recruiter who has been assigned a project to fill a professional level security risk related role. This firm may or may not have a specialty security risk related practice and may or may not be a firm that you have ever heard of.
Meeting Between U.S. Chamber of Commerce, National Security Task Force Held at ASIS International
September 29, 2014
Governor Tom Ridge, Chairman of the U.S. Chamber of Commerce National Security Task Force, led a dynamic and interactive discussion with a panel of senior security executives from some of the world’s largest organizations at the ASIS International 60th Annual Seminar and Exhibits (ASIS 2014). The discussion looked at the threats facing multinational organizations, from cyber attacks to supply chain risks. This session, was held at the Georgia World Congress Center in Atlanta, Ga. on Monday, Sept. 29.
Each year, Security magazine honors top security executives who positively impact the security industry, their organization, their colleagues and their peers.
This year’s Most Influential is organized by five categories: Corporate Security Practitioners, Public Sector Security, University/Think Tanks, Cybersecurity and State/Local Government Security.
Protecting and supporting stakeholders on a global scale through investments in security operations centers (SOCs), intelligence services and travel support companies has become a best practice for leading security programs.
Some businesses, such as airlines, have either suspended service or increased passenger screening in the area. British Airways suspended service to both Liberia and Sierra Leone. Air France and Brussels Airlines increased screening procedures and warned that service could be cut at any time.
More than half of Chief Executive Officers will have a senior digital leader role in their staff by the end of 2015. However, the duties of a Digital Risk Officer would be very different than a chief information security officer (CISO).
The key to the risk-based security program is that no matter what issue you examine, every one of them affects the reputation of the enterprise in one manner or another.
Once the risk matrix has been populated, management must then prioritize the risks and determine which are the most critical to the viability, survivability and resilience of the enterprise. When that prioritization has been completed, various functions within the organization can be tasked to design the appropriate solution for the risk involved.