Ambassador

Chris Cooper

Fractional CISO at Rougemont Security

United KingdomVerified Community Ambassador

Identified Expertise

Content Chris is Following

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.8k views123 Upvotes58 Comments

Are you happy in your current role?

People & Leadership Talent Management & Performance

Yes

Unsure

View Results

32.4k views18 Upvotes17 Comments

Working as a Fractional CISO, one of the challenges is keeping track of all the management information for each client. Everything from risks, audits, vulnerability management etc.

Have you tried any vCISO type management tools and were they any good?

Or have you repurposed a different tool to achieve the same purpose?

Security & GRC

Chris CooperFractional CISO at Rougemont Security in Telecommunicationa year ago

Hi there! We used to handle risk management and compliance assessment work manually using Excel spreadsheets or an in-house developed tool. It was a painful process that made it difficult to track approval processes, causing ...read more

252 views1 Comment

I'm looking to establish the most effective communication strategies for disseminating crucial information (such as road closures, weather updates, and active shooter alerts) to airport stakeholders, including Uber drivers, skycaps, security personnel, public works, and contractors.

- Is Everbridge and Microsoft Teams viable for these types of communications?
- What are the best practices or other recommended platforms for ensuring rapid and reliable communication in such scenarios?

Security & GRC Management Tools

Chris CooperFractional CISO at Rougemont Security in Telecommunicationa year ago

It is not entirely clear from your question whether you want push notifications (i.e. one-way) or bi-directional (two-way) communications, but I am going to assume the previous.

Tools like Microsoft Teams are not great ...read more

In our organization, we regularly distribute cybersecurity awareness emailers to keep users informed about new attacks and threats.

However, we are interested in understanding how other organizations measure the impact of these awareness initiatives on their users.

Specifically, we are concerned about potential methods for assessment, such as quizzes, where there might be a possibility of cheating.

Could you please share the methods you use to evaluate the effectiveness of your cybersecurity awareness programs and how you address issues like cheating?

Chris CooperFractional CISO at Rougemont Security in Telecommunicationa year ago

Effectiveness through testing of knowledge is different than testing through desired behavior. Awareness programs should measure the ability to educate towards consistently identifying and treating threats in a safe and ...read more