CISO: A Critical Role in Resilience of the Extended Enterprise

Understanding and managing risk in today’s environment requires a new paradigm in managing the interconnections and relationships of risk. Given the pervasive use of information and technology across the organization, today’s CISO needs to be a strategic leader in the organization’s operational risk and resiliency efforts to govern the extended enterprise of third-party relationships. This requires that this role have robust, accurate, and relevant risk intelligence to govern security in the extended enterprise. By doing so, the organization knows pivotal details and can quickly remediate risk issues to be agile and resilient. It also needs to capture changing business and risks for interpretation, analysis, and holistic awareness of security in the context of the extended enterprise. CISOs need to stay on top of their game by monitoring risk to the extended enterprise to stay competitive in today’s economy. Organizations must understand information security risks and make risk-informed business decisions to be both resilient and agile, which requires a resiliency operations center to provide situational awareness.