What area(s) do you think your organization should improve to strengthen its cybersecurity posture?

ArchitectureStrategy

Building an effective incident response plan29%

Educating and training employees on cybersecurity58%

Enforcing password and access management50%

Protecting endpoint devices40%

Integrating security solutions21%

Embracing the cloud7%

276 PARTICIPANTS
2.9k viewscircle icon2 Upvotescircle icon1 Comment
Sort by:
Head of IT and Security in Finance (non-banking)4 years ago

We focus so much on technologies that we forget that most attacks come from social engineering

Lightbulb on2

Content you might like

Do you think DOGE's actions are likely to enable a successful ransomware attack on a U.S. government agency?

Extremely likely7%

Very likely22%

Somewhat likely18%

Neutral25%

Somewhat unlikely12%

Very unlikely7%

Extremely unlikely9%

Hard to say/Don’t know

View Results

How do you think AI will disrupt business across industries? Add to my list: 1. Content creation 2. Photos and video production 3. Basic coding and debugging 4. Strategic analysis to be highly complimented 

Read More Comments

How is your company tracking whether 3rd party APIs used by your production code to exchange data with vendors, providers, and partners through connectors are: (1) Exchanging the agreed upon data as defined in the Data Protection Agreements (DPA), Standard Contractual Clauses (SCC)? (2) Validating geographical data residency and transfer guidelines with the 3rd parties that have been agreed upon?

We are not able to do this in real time as of now7%

We do quarterly manual reviews or yearly interviews with the 3rd parties25%

We depend on the 3rd parties to let us know out of band if they feel they have violated the DPA, SCC31%

We have a dedicated personnel that monitors these data transfers using homegrown tools18%

We use outbound firewalls, CDNS, load balancers, API gateways - to get some visibility into these issues, but don't have a complete workflow in place9%

We have built homegrown custom solutions to address this4%

We use commercial services to answer if there is a difference between expected DPA, SCC behavior and reality in terms of data being sent to 3rd parties3%

View Results

Can you share any effective processes/strategies you’ve used to integrate cyber risk management and enterprise risk management at your org?

Read More Comments

What challenges are you facing today with governing AI?

Read More Comments