2 ms·
does this feel to anyone else like hiring a Chief Fall Guy? Securing data is and should be under the chief technical officer or the chief security officer, depe
by ratelimitsteve 1y ago
does this feel to anyone else like hiring a Chief Fall Guy? Securing data is and should be under the chief technical officer or the chief security officer, depending on how the org is structured, rendering this position redundant. The pattern I bet we see emerge is gonna be one where it's rather a cushy gig for a while but if there's a breach you're expected to resign or be fired so that the company can give us the old "the people responsible have been sacked". Like the moderately racist legends of tribes in a land untouched by modern civilization who designate a king and let him live in luxury for as long as times are good, and then behead him as a sacrifice at the first crop failure.
- thewebguyd 1y agoKind of what it sounds like to me. > “Effectively, what the role does is offer assurance to the customers or potential customers of that organization that their data, their information, their technology, the infrastructure, the platform itself, can be trusted as those customers adopt it,” Like, protecting your customer's data should be assumed and the default. That you would need what's effectively another PR executive to communicate that and "offer assurance" just sounds like marketing speak for "We are doing the bare minimum, but we need our customers to think we do more than we actually do to keep theri data safe." Just sounds like the CISO's personal PR mouthpiece and like you said, someone else to take the fall when they get breached.