Which of these resources have you used to design cybersecurity programs?

Security Strategy & RoadmapSecurity Frameworks (NIST, CIS, CSF)

Control frameworks18%

Program frameworks38%

Risk frameworks22%

Consultant services11%

Managed security service providers (MSSPs)5%

Other outsourcing services3%

Other

155 PARTICIPANTS
1.6k viewscircle icon1 Comment
Sort by:
CIO in Governmenta year ago

Should be multi-select answer.

Content you might like

Vulnerability patching is now a full-time job.

Strongly agree8%

Agree61%

Neutral21%

Disagree5%

Strongly disagree3%

Unsure (please comment)

View Results

Do you expect your cybersecurity program budget to increase or decrease in the next year?

Significantly increase11%

Moderately increase58%

Neither (no change)24%

Moderately decrease4%

Significantly decrease1%

Unsure

View Results

‘AI’ Business Model – With many components flowing into the AI domain (cost, data, E&C, people, value, strategy, duplication of everything, etc.), I’ve started to think about splitting out ‘AI’ from the operating model and putting it into a separate legal entity. This way, I could manage a) risk and compliance, b) cost, c) resource allocation, d) governance, e) IP, f) revenue generation, etc.

Of course, this isn’t new in general, but I’m especially interested in how this approach could help with the ongoing challenge of ensuring compliance with data privacy and regulations related to LLMs and data access/usage over time.

My question: Is anyone else thinking about this, or has anyone already done it? I know there are examples in the literature, but I wanted to float this here for general comments and discussion.

What models are in place for risk partners based in Line 2? What are the jobs to be done? How do they operate? What does the structure/operating rythms look like?

Read More Comments

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

Read More Comments