Chris Hallenbeck – CISO, Americas at Tanium

Chris Hallenbeck is CISO for the Americas at Tanium. Chris provides security leadership and operational insight gained from over 20 years in both public and private sector. Chris came to Tanium after almost 7 years of government service at the U.S. Computer Emergency Readiness Team (US-CERT). At US-CERT he designed and built their incident response capabilities, and restructured the team’s focus toward strategic remediation with a goal of building more resilient organizations. Chris believes that breaking the incident response “Groundhog Day” cycle requires an emphasis on IT hygiene. Prior to joining US-CERT, Chris worked for RSA Security as a security engineer and with AOL/Time Warner on their global incident response team. He started his career as a Unix sys-admin at Binghamton University. When not chasing electrons he prefers to be 20-30 meters under the sea.

Jason Albuquerque

CIO & CSO at Carousel Industries

Matt Alderman

Executive Director at CyberRisk Alliance

Paul Asadoorian

Founder at Security Weekly

Jason Albuquerque

CIO & CSO at Carousel Industries

Matt Alderman

Executive Director at CyberRisk Alliance

1. CISOs Struggle to Cope with Mounting Job Stress – The CISOs aren’t OK.

   A new survey showed the pandemic has ratcheted up job pressure to “extreme stress” levels among chief information security officers (CISOs), and it’s left them grappling for coping mechanisms ranging from workouts to narcotics.

2. 8 things CISOs should be thinking about, but probably aren’t – CISOs need to cover all the security bases. The problem is, some of the bases are easy to overlook. Here’s a rundown of eight often-overlooked areas that CISOs should immediately address:

   1. Ensuring that third-party partners maintain strong security
   2. Investigating innovation opportunities
   3. Understanding their enterprise’s data footprint
   4. Strengthening security team support and focus
   5. Thinking ahead
   6. Maintaining return on existing security investments
   7. Finding ways to build enterprise management unity
   8. Developing a truly effective method to sharpen threat awareness

3. Corporate Compliance Strategies to Protect Data – Companies that bring teams together and form an operational strategy are more likely to protect data than the best-intentioned silo approach.
4. Cybersecurity Metrics That Matter – Wendy Nather, head of advisory CISOs at Cisco, recently teamed up with researcher Wade Baker to investigate cybersecurity metrics and determine how to make a cybersecurity program measurably more successful. She shares some of her more surprising findings, including:

   1. Best Practices that Improve Security Outcomes: 1) Proactive Technology Refresh and 2) Integrated Technology Stacks
   2. Compliance in name only is not enough
   3. Metrics that Matter are tied to Outcomes and Capabilities of each Organization

5. Security by Design: A New Model for Cloud, Cyber – An integrated approach can help build business and technology resilience, which can act as a differentiator for companies focused on building consumer trust. This security-by-design approach can lead to several benefits, including:

   – Providing leading-edge, innovative security approaches such as intelligent threat detection
   – Reducing risk related to technology, insider threats, and supply chain
   – Supporting developers and engineers while enabling the business with development, security, and operations (DevSecOps)
   – Establishing a cyber-forward approach that reinforces and enhances business objectives, including security and trust
   – Identifying potential cyber incident and breach scenarios during cloud migration that help build stronger cyber and business resilience.

6. 4 ways to handle the cybersecurity skills shortage in 2021 – Four suggestions for CISOs, executives, and boards to address the negative effects of the cybersecurity skills shortage:

   1. Incentivize employees
   2. Invest in training
   3. Recruit via professional networks
   4. Get HR on board

Paul Asadoorian

Founder at Security Weekly