Policy management relevant to data exchanges with third parties. How are you doing it and who is responsible for enforcing and maintaining those policies?

1.5k viewscircle icon2 Comments
Sort by:
Global Chief Cybersecurity Strategist & CISO in Healthcare and Biotecha year ago

Really have seen the shift away from CIO to General Counsel/CCO.

Field Chief information Security Officer (CISO) for Public Sector & Client Advisor in Finance (non-banking)a year ago

In the public sector, especially in state and local governments, this policy management role has traditionally been under the Chief Information Officer (CIO). In many cases there has been a policy team that works with the procurement organization(s) that ensure that the right contract language is contained in statements of work and requests for proposals. 

Also, governance and enforcement of compliance with these policies and industry standards has been under the CISO, CTO, Chief Privacy Officers (CPOs) and other tech leaders who also ensure that policies, standards are procedures are up-to-date and relevant.  

That being said, many public sector organizations are adding Chief Data Officers (CDOs) that do not necessarily report to the CIO. In some cases, these CDOs are in business areas or report to other senior leaders.   

Content you might like

HashiCorp (Terraform, Vault, Packer, etc.)22%

Cloud infra automation (Ansible, Puppet, Chef, etc.)56%

APM (Datadog, AppD, SignalFX, NewRelic, etc.)10%

Others?10%

View Results

I am a huge fan of this technology20%

I find this technology very useful, yet have some slight doubts64%

I have quite a few doubts about this technology12%

I am not a fan of this technology at all2%

View Results