Does your org evaluate IT or engineering employees’ security practices as part of performance review processes?

Talent Management & PerformanceAwareness & Training

Yes - both IT & engineering employees44%

Yes - only IT employees44%

Yes - only engineering employees5%

No7%

Don’t know/other

73 PARTICIPANTS
437 viewscircle icon1 Comment
Sort by:
CISO in Softwarea year ago

How are these practices measured and evaluated in a performance review?  Please do share best practices.

Lightbulb on1

Content you might like

A common challenge in our risk-tiering framework for suppliers is that even the lowest risk tier still requires processing.
Has anyone implemented a "not relevant" risk tier in their model?
This tier would apply to vendors posing genuinely negligible security risk.

What factors help your team decide that it's time to stop software testing for a release? Choose the top 3.

% of tests executed/test coverage30%

% of requirements covered by testing/code coverage43%

% of total tests passed45%

% of critical tests passed38%

% of critical business flows passed29%

Project deadline is reached21%

Project budget is reached14%

Minimum acceptable defect rate is achieved12%

Go/No-Go meeting11%

Other1%

View Results

What are the fundamental leadership capabilities that are needed for an era of exponential technology and AI innovation?

Read More Comments

What is your online platform of choice to train your team on technical skills?

Linkedin Learning47%

Udemy44%

Coursera8%

View Results

How are you diversifying threat intelligence sources? Have you been able to reduce reliance on CISA for TI?