Peer-Driven Insights

Security Strategy & Roadmap

Active Ambassadors in This Topic

Chris Oehlerking

Honeywell

Manufacturing, 1k - 5k

Clifton Persaud

ISACA

Education, 10k+

Clifton Persaud

ISACA-GWDC

Education, 5k - 10k

View All Community Ambassadors

Community Posts

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

Considering the current economic climate and organizational priorities, how likely is it that your organization will increase, decrease, or maintain its cybersecurity budget this year?

Read More Comments

How confident are you in letting AI agents take autonomous actions after a SIEM or XDR alert?
Are you using them today? If not, what’s holding you back?

Read More Comments

How many 3rd party antivirus products do you have on a user's PC?

None13%

0 - Rely on built in defender AV47%

133%

2 or more5%

View Results

How are global companies typically structured when they have a global CISO and additional CISOs responsible for different regions? In these organizations, how are policies, approval processes, and compliance with local regulations managed across different regions?

Read More Comments

How are you socializing quantum-safe cryptography with your organization's leadership team? What’s your approach to the messaging around that given the complexity?

Read More Comments

Based on your past experiences with starting a new position, what sorts of quick wins tend to have the greatest impact in terms of building up your credibility with stakeholders?

Read More Comments

Has your company made you feel comfortable about the prospect of returning to the office?

Yes - My company has been clear with the back to office plan82%

No - Messaging around return to the office has been confusing and disjointed18%

I'm looking for an open-source IGA solution, has anyone had any experience they can share?

Security features like Apple's "Lockdown Mode" should become the norm for hardware.

Strongly agree7%

Agree71%

Neutral18%

Disagree3%

Strongly disagree

Unsure (explain in the comments)

View Results

What are your thoughts around Sophos' acquisition of Secureworks? Do you think the collective Sophos would be good to combine endpoint management with incident response retainer?

Read More Comments

Does anyone have any experience with Dune Security? I am in the process of doing an RFP for a vendor to provide phishing simulation and annual training content and their name came up, but I've not heard of them. My current vendor is KB4.

My company has 2 Internet egress points behind 2 hide NAT IPs. One of those IPs is getting listed on Akamai's reputation list, and any Akamai customer who blocks traffic using their reputation score, is blocking my company (site forbidden with edgesuite error). We are not an Akamai customer, and when we ask their tech support for details on the reputation score, they will not provide; they simply point out the high level reasons why one might get a bad reputation. We have hunted for any internal host that might be sending out malicious traffic and causing this, and we have not identified any. We have 30k employees all using one of those 2 hide IPs, so this high traffic volume could be the trigger. Also, when we visit Akamai's reputational checker site, it says "your IP did not receive a bad risk score". So we get inconsistent reports from Akamai. Anyone else experience this and/or have suggestions on how to get Akamai to provide details so we can identify why we are on their reputation list?

Read More Comments

When it comes to security vendor contract renegotiation, what sort of tactics have been most reliably effective for your org?

What advanced identity analytics or continuous access controls is your organization using (or planning to implement)? Any lessons learned you can share regarding vendor selection or implementation?

Read More Comments

What strategies do you use to ensure IAM solutions are sufficiently composable to adapt to changing business needs?

Read More Comments