Have you ever joined a security organization after it lost credibility within the business (for instance, after a major breach)? What did you do to build it back up?

3k viewscircle icon1 Upvotecircle icon3 Comments
Sort by:
Senior Information Security Manager in Software3 years ago

Not directly.

But some years ago I was involved with the ISSA Generally Accepted Information Security Principles (GAISP)  project.
Since it was 100% volunteer-based and had no real leadership, it just sort of petered out.

Lightbulb on1
CIO in Government3 years ago

I myself have not been involved with an organization that has had a major security problem. Helped an organization with a security (ransomware) problem. Most important was solving first. Provide the right information to the public and, after recovery, communicate openly and transparently about the attack, the steps taken and the approach to recovery. Of course within the standards of security and privacy. This restored confidence in the organization and normal services were quickly restored.

Lightbulb on1
Senior Director Engineering in Travel and Hospitality3 years ago

Not a security organization, but in the past I have joined a place which had lost its reputation due to other reasons. Its almost like building it back from scratch, like any startup would. Take small steps in building trust, and ensure you pay high level attention to customer retention. If you are truthful and open, people will gain back trust.

Content you might like

AI-driven threats (deepfakes, automated attacks) 16%

Software supply chain risks 24%

Insider risk (both malicious & accidental) 14%

Regulatory compliance 14%

Cloud misconfigurations 14%

Shadow IT (or shadow AI) 8%

Ransomware 5%

Talent shortage in cybersecurity3%

Something else (comment to explain)3%

View Results

Yes44%

Not yet, but we’re planning to39%

No8%

What’s a pig butchering scam?7%

View Results