Peer-Driven Insights

Security

Active Ambassadors in This Topic

Joseph Doyle

Okta

Software, 5k - 10k

Clifton Persaud

ISACA-GWDC

Education, 5k - 10k

Alexander Hettrich

KOENIG & BAUER AG

Manufacturing, 5k - 10k

View All Community Ambassadors

Community Posts

What is the best Insider Risk Management solution?

Read More Comments

We have a BYOD policy and we need to amend our policy to include banned mobile apps due to security/privacy concerns, i.e. TikTok. Has anyone found a trustworthy and maintained list of apps your company should ban from mobile devices that access your information systems due to privacy and security concerns?

Read More Comments

What are your biggest challenges in handling consumer data with respect to data privacy and security and what tools and processes help you manage these?

Read More Comments

What will be the biggest cybersecurity threat of 2022?

Attacks targeting authenticator apps58%

IoT Denial-of-use attacks33%

Cyber extortion of high profile individuals59%

C-level impersonations18%

Something else (comment below)1%

View Results

How do you determine the number of Cyber Security persons an organization needs? What is the connection between the number of employees and the number of security systems?

Read More Comments

Would you support the convergence of Security Operations Center (SOC) and Network Operations Center (NOC) functions to:
1) Drive operational efficiency
2) Reduce costs through automation, and;
3) Align tools and processes under a unified, standardized platform offering a single-pane-of-glass view of security and network telemetry?

Yes77%

No13%

Maybe10%

View Results

How many authenticator apps do you currently use for work?

None4%

129%

242%

3 - 522%

5 or more1%

View Results

What password security options do you think will be more universally adopted in the coming year?

Read More Comments

Are document storage/sharing SaaS providers doing enough to protect sensitive data, in your opinion?

Read More Comments

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

Read More Comments

AI deepfakes have cost the industry over $200M this year. As CISOs, can we scale detection fast enough, or is regulatory pressure the only way to drive adoption?

Read More Comments

Non-human identities (NHIs), such as API keys, service accounts, and tokens, outnumber humans by 25 to 50 times and often go ungoverned. From Entro’s 2025 report:
• 90% have excessive permissions
• 44% are exposed in the wild
• 91% of stale secrets are never revoked

What helped us: inventory, assign owners, right-size access, monitor behavior, and test continuously.

How mature is your NHI program? Biggest barrier, tooling, ownership, or adoption?

If you’ve worked with mobile applications and have experience scanning code, either for vulnerabilities or to ensure best practices, what tools or solutions would you recommend for iOS and Android platforms?

Considering the current economic climate and organizational priorities, how likely is it that your organization will increase, decrease, or maintain its cybersecurity budget this year?

Read More Comments

How are global companies typically structured when they have a global CISO and additional CISOs responsible for different regions? In these organizations, how are policies, approval processes, and compliance with local regulations managed across different regions?

Read More Comments

Entra MFA for Internal Colleagues (not remote access): What time period do you set for reauthentication? What conditional access / refresh token expiry time frame do you have in place? i.e - MFA every log in, every 24hrs, every 15 days etc.