What is the average age of your IT systems?

Security & GRC

1-3 years old22%

4-6 years old59%

7-10 years old17%

11-20 years old1%

20+ years old1%

220 PARTICIPANTS

565 views2 Upvotes2 Comments

Director in Manufacturing, 1,001 - 5,000 employees

It’s a bit hard to answer. If we have 120k people on teams is that one App that is Zero years old since it’s in the cloud and in theory perpetually upgraded ?

Is a 20 year would of date ERP on an AS/400 with 2,000 users 2,000 twenty year old apps?

I can tell you our oldest app is over 35, and our newest app is probably days old

2 1 Reply

Senior Director, Defense Programs in Software, 5,001 - 10,000 employees

Indeed! Is Salesforce 22 years old, or the time from the last 3x/year update (or depending on which architecture)?

There’s also the discussion of what makes up a “system” - and the impacts are has to do with it.

Content you might like

Which EDR has less false positives?

Security & GRC IT Strategy & Roadmap Security Strategy & Roadmap

crowd strike36%

sentinel one60%

carbon black5%

cynet0%

42 PARTICIPANTS

325 views

Would anyone be willing to share best practices about how their organization deals with ensuring Cookie Compliance, specifically to GDPR rules? Where should this sort of compliance review sit in an organization? The particular issue we have is who should review new web deployments that use cookies and to make the decisions on whether Cookies are Strictly Necessary or Functionality Cookies. For example is a Cookie required for a Live Chat to work Functionality or Strictly Necessary? Our Security team does not consider taking on these compliance reviews as their domain, as Cookie Compliance is not an internal security matter and the Data Protection team has a limited interest as the GDPR rules around Cookies apply in case of any Cookie being used by a website, whether or not it contains personal data.

Security & GRC Regulatory Compliance

Head of Cyber Security in Manufacturing, 501 - 1,000 employees

I would say, DPO and Security team both shall be involved and work hand in hand.

Most of the time the legals and or DPO don't have the technical acumen to understand when data is floating to third party services.

Lets ...read more

216 views1 Comment

Are short term bans of the use of GenAI applications and tools (such as ChatGPT) a good idea for end users in most organizations? For context see this article on the State of Maine Government's directive before you vote: https://www.govtech.com/artificial-intelligence/chatgpt-generative-ai-gets-6-month-ban-in-maine-government

Applications & Platforms End-User Services & Collaboration People & Leadership +4 more

Yes - Maine did the right thing. There are too many security risks with free versions of these tools. Not enough copyright or privacy protections of data.31%

No, but.... - You must have good security and privacy policies in place for ChatGPT (and other GenAI apps). My organization has policies and meaningful ways to enforce those policies and procedures for staff.52%

No - Bans simply don't work. Even without policies, this action hurts innovation and sends the wrong message to staff and the world about our organization.12%

I'm not sure. This action by Maine makes me think. Let me get back to you in a few weeks (or months).3%

354 PARTICIPANTS

9.3k views9 Upvotes1 Comment

If you had a magic wand - what's the #1 daily business challenge you'd eliminate?

People & Leadership Strategy & Architecture Cloud +57 more

CTO in Software, 201 - 500 employees

Without a doubt - Technical Debt! It's a ball and chain that creates an ever increasing drag on any organization, stifles innovation, and prevents transformation.

142 19 Replies

What are some effective ways to get buy-in from leadership to establish your first security PMO?

Security & GRC Security Strategy & Roadmap Internal CXO Relationships

Head of Information Security in Services (non-Government), 1,001 - 5,000 employees

The first thing you need to do is assess the maturity of your security program and then establish a roadmap of projects based on industry standard frameworks. Based on that assessment, you can develop an associated budget ...read more

124 views1 Comment