Security Ratings as a Vehicle for Communication
There’s never going to be a silver bullet that makes a CISO’s job easy, but I believe that with the right people, tools, metrics, and KPIs, the job can become easier. My fellow security leaders—the CISO mafia, if you will—have expressed frustration in the past when it comes to Security Ratings. Their view has been that an external rating was not done with any cooperation or internal view of their security environment.