RSA, the security division of EMC, has released a new research report that explores the link between CEO priorities and information security strategy examining how a divide between an organization's CEO and its security officer can detrimentally impact its risk profile and ultimate business success.
As the fifth report in RSA's Security for Business Innovation series, bridging the CISO-CEO Divide takes an in-depth look at what it takes to garner CEO support for a strategic information security effort. Coupled with it are the recommendations for what CISOs should not do, taking a candid look at some potentially job-losing ways to alienate CEO. Most importantly, the report challenges CEOs to see how their lack of support for strategic information security could unintentionally put their companies at risk.
"The importance of aligning security investments with the corporate agenda is now well understood," said Art Coviello, Executive Vice-President, EMC Corporation and President, RSA, The Security Division of EMC. "Yet in spite of this progress, most security leaders are still struggling to convince their CEOs that security absolutely must be a core component of their business strategy. It is time to get this issue solved, and success will require both CEOs and CISOs to shift how they think, act and run their organizations."
The report is based on in-depth conversations with the Security for Business Innovation Council, whose members are the top security executives at the world's largest organizations, as well as Michael Capellas, Chairman & CEO of First Data.
