3 ms·
I work in this space. The article does a poor job of explaining exactly what this role does - but they allude to it with Chris Peake's comments. > Peake, a for
by SkyPuncher 1y ago
I work in this space. The article does a poor job of explaining exactly what this role does - but they allude to it with Chris Peake's comments.
> Peake, a former CISO, said a lot of the skills from his previous role have translated into his current one. However, he said the CTrO role differs from the CISO role because it operates more on the “business level,” as the work done by a CTrO can directly impact revenue generation, contract negotiation, and onboarding new customers.
In my view, it's a role that sits between Sales and Security. A major part of the role is getting customers and prospects information about your business and security controls to validate their own needs (e.g. compliance requirements). It's still a semi-technical role, but isn't necessarily focused on the nut-and-bolts of ground-level security.
- Onavo 1y agoWell, it also helps to spread the responsibility and when you get hacked you can either promote one and fire the other one, or just fire both to show that you are doing something.
- SkyPuncher 1y agoEh, not really. There's pretty clearly lines of responsibility here. The nuts-and-bolts security still falls to a CISO. This role is more about bridging the gap between security teams and customers. The Trust officer might have influence over high level roadmap items ("our customers are asking about X"), but the actual implementation will still land with the CISO.
- evanjrowley 1y agoSounds like a Chief Compliance Officer but with applicability to less-regulated industries/markets.
- alephnerd 1y agoBasically. But the issue is, in a lot of enterprises, the decisionmakers won't chat with anyone who doesn't have an exec title.
- hinkley 1y agoThis could be something to watch out for. Always look at who is requesting more regulation. Make sure they’re doing it for the right reasons and not simply to build moats that small companies can no longer cross. It can be a form of regulatory capture to propose the regulations in the first place.
- SkyPuncher 1y agoKind of. I think Compliance and Security officers have historically been considered an inward facing role. The Trust officer is an outward-facing role.
- samrus 1y agoThats what i was thinking. The lack of regulations limits opportunity because customers are scared of getting screwed, so the companies have to make their own rule to comply with, after assessing what safety customers want The corpos yearn for regulations
- evanjrowley 1y agoOr like a Chief Risk Officer, but with extra customer facing responsibilities