Don't Silo Cyber Risk to CISOs, Says Former Financial CISO

Google's Alicja Cade Says 'Cyber' Isn't Just for CISOs Mathew J. Schwartz (euroinfosec) • May 9, 2024

Tossing the word "cyber" onto something doesn't automatically mean it should belong to the chief information security officer. Cyber risk belongs to everyone in an organization - the users and the business divisions that make decisions about what kind of risks are acceptable. Chief information and technology officers also own it.

"Those parts of the organizations are often the risk owners, it's not the CISO," said Alicja Cade, director, financial services, Office of the CISO, Google Cloud. /p>

Cade's message to organizations is that CISOs should be collaborating across business units. Hand in hand with that is a belief that technology is only a slice of the CISO job description. "The huge part of the pie is people. People and culture."

See Also: Identity Security and the Quest for Zero ...