Ever wonder how effective your cyber program is? You definitely should. leaders
As senior leaders, you have a fiduciary responsibility to manage risk but as leaders in the defense industrial base, state government, energy, critical manufacturing, financial services, healthcare, emergency operations, etc. you have a moral obligation to the communities you serve. This is one of those scenarios when the old “I’m here from the federal government and I’m here to help” should scare the hell out of you. leaders
Why? There are a lot of you – CI sector orgs and state or local government – and not many of those feds. So if they are creating a policy, regulation, or adding a framework or, heaven forbid, giving you a call it is almost guaranteed to be too late for you to build cyber resiliency. leaders
All the buzzwords, e.g., zero trust, SASE, XDR, MDR, DLP, aside, you need to know where you are (in terms of cyber posture), where you want to be (filtered through the lens of operational constraints and realism) and what critical things you need to go do in order to prevent what you can predict. This is what I call a ‘sky blue’ observation. leaders
Getting to a decent state of maturity with your Attack Surface Management, data protection, detection, and response is laudable. If you make your decisions based on integrated risk management – that’s even better. leaders
But your divisions? Subsidiaries? Sister agencies who can access your data? Service providers? Vendors? leaders
Odds are that they pose a big risk to your pristine and mature (ok – let’s be honest, more likely developing) cyber resilience program. They have tech sprawl (just like everyone), they have trouble retaining talent (again – like everyone) and their teams are overwhelmed. leaders
It is 2022 and we have the ability to manage cyber posture – compliance, maturity, and effectiveness. We can provide contextualized data to decision-makers and connect the dots for cyber defenders so they can gain a competitive edge against the onslaught of threats. AND it is completely reasonable to ask for a level of visibility that gives you peace of mind and makes both your org and your ecosystem better equipped to meet your fiduciary AND moral obligations. leaders
For more information, interviews, or to publish, please visit https://conquestcyber.com/
About Jeffery J Engle
Jeffrey J Engle is Chairman & President at Conquest Cyber where he brings a broad spectrum of experience in Risk Management, National Security and Business Process Optimization. He is responsible for the development and implementation of all strategic initiatives including cyber risk management and secure digital transformation programs. He has served as a consultant for the Department of Defense’s premier adversary emulation team and has conducted vulnerability assessments and training all over the world. leaders
Discussion about this post