Does your org incorporate input from development teams before deciding which AppSec tool to purchase?

Applications & PlatformsSecurity Strategy & Roadmap

Yes, always32%

Sometimes58%

No9%

Unsure1%

81 PARTICIPANTS
414 viewscircle icon1 Comment
Sort by:
CISO in Bankinga year ago

I feel it's important to discuss an applications impact with any areas of IT, it makes a more effective team that pulls together to address cybersecurity issues and needs. 

Content you might like

What are your preferred tactics for building effective collaboration on cross-functional teams involved in AI governance and risk management (e.g., joint steering committees, shared KPIs, etc.)? Which roles are currently involved?

Read More Comments

Has software development security at your organization improved since this time last year?

Yes - by a LOT24%

Yes - somewhat52%

Minimal improvements, still more to do18%

Nope4%

Other/don't know

View Results

Which of these tools are you using to monitor/identify shadow AI use in your organization? (Choose all applicable to you)

SaaS discovery solution (like Netskope or Cisco Umbrella) 30%

CASB tool 46%

Packet sniffing (deep packet inspection) tool 28%

EDR tool/platform 18%

Something else (please share in a comment) 15%

N/A — we’re not currently using any tools to track shadow AI6%

View Results

How have you adjusted the architecture of your controls for data, identity and access to better support AI governance and security?

Read More Comments

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP. 

Read More Comments