Security leadership will never be able to eliminate all security barriers. However, the more they can address even a handful of the issues incrementally, the better their cybersecurity performance will be over time.
Even in the best of conditions, the day-to-day grind of battling threats and mitigating cyber risk is arduous. Unfortunately, many security professionals operate in circumstances where there is more friction, making it more difficult to accomplish their tasks efficiently.
Company culture, procedural limitations, and resource constraints are just a few examples of what can prevent security professionals from making substantial progress in enhancing a company’s cybersecurity posture. The following are five of the most prevalent roadblocks that prevent them from working on cybersecurity on a daily basis.
Reporting Structure
One factor that makes it difficult for some CISOs to be effective in their roles is their reporting structure. Reporting structures that are out of whack can have a significant impact on how security work is directed, and funded, and how much political capital CISOs have to achieve genuine change in the company.
If they report to the CIO, for example, the CIO’s aims and objectives are frequently at odds with the CISOs. Reporting to the CFO can prove to be tricky, and not simply because CFOs are so focused on the bottom line.
The CFO’s perception of risk differs significantly from that of the CISO, and this disparity can be a cause of friction on a daily basis.
Full article: Top Five Roadblocks Faced by CISOs When Handling Enterprise Security
