Does your org evaluate IT or engineering employees’ security practices as part of performance review processes?

Talent Management & PerformanceAwareness & Training

Yes - both IT & engineering employees59%

Yes - only IT employees35%

Yes - only engineering employees2%

No3%

Don’t know/other

78 PARTICIPANTS
461 viewscircle icon1 Comment
Sort by:
CISO in Softwarea year ago

How are these practices measured and evaluated in a performance review?  Please do share best practices.

Lightbulb on1

Content you might like

What are the main 10 features requested in a GRC platform?

Read More Comments

Do you have data that allows you to objectively measure your team’s effectiveness as well as any positive impacts? What data do you currently rely on?

Do you create personalized career development plans for your cyber employees?

Yes60%

In some cases34%

No6%

View Results

Which of these cyber assessments are better conducted by external consultants/services? (Tell me why in the comments)

Threat assessments28%

Risk evaluations35%

Control reviews27%

Policy reviews31%

Change management process assessments28%

Incident reviews30%

Training program validation25%

Issue remediation10%

Application assessments14%

System assessments11%

Baseline assessments12%

Other (I’ll tell you in the comments)1%

View Results

Can anyone share how they have partnered with HR to prevent shadow agents from accessing HR data outside of sanctioned AI platforms/tools?