Based on your past experiences with starting a new position, what sorts of quick wins tend to have the greatest impact in terms of building up your credibility with stakeholders?

Security & GRCRelationship Management
1k viewscircle icon2 Comments
Sort by:
CISO in Energy and Utilitiesa month ago

You will need approx 90 days to become somewhat experienced with your new company. After this period, you may will find some quick wins to the company. Use these as an opportunity to deliver values relatively quickly. 

Chief Executive Officera month ago

Writing a fresh eye report.

Lightbulb on1

Content you might like

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Disesdi Susanna Cox outlines 3 critical threats:
1. Non-deterministic decisions – same prompt, different actions (e.g., unintended transfers).
2. Cascading failures – multi-step tasks = more attack surface.
3. Emergent behavior – guardrails can’t cover infinite edge cases; focus on blast radius and recovery.

3 Controls to Implement Now: 
• Map agent workflows to attack tactics (MITRE ATLAS)
• Weekly prompt-injection tests (OWASP + CSA)
• Least-privilege, expiring agent tokens (NIST AI RMF + CSA MAESTRO)

Which control or framework gives you the biggest headache, and how are you tackling it?

Full analysis: https://disesdi.substack.com/p/openai-just-dropped-their-agentic

Does your organization have a strategy to address disinformation risks?

Yes

Not yet – we’re working on it80%

No20%

Unsure

View Results

Our company deeply entered in the Microsoft world (EntraId, M365, Azure).  Microsoft is publishing, in particular, a compliance dashboard and security dashboard. How are you using them and which kind of governance are you putting around them?

From your POV, what’s the current state of your resources/funding for data security governance efforts, overall?

Excellent (more than enough)10%

Good (we have enough to reach our goals)55%

Acceptable (could be better but we make do)31%

Poor/unacceptable (more funding needed ASAP)3%

Unsure / other

View Results