Posts Tagged ‘IMF Forums’

If Your Organization Does Not Have a CISO, You Are Missing Out

March 26th, 2013

nalneesh gaur IMF security forumOrganizations are increasingly establishing the role of the Chief Information Security Officer (CISO). In fact, PwC’s Global Information Systems Security Survey finds that 42% of the surveyed organizations have established a CISO role. According to PwC Director Nalneesh Gaur, the CISO role is not a purely technology oriented role; instead it is a role where the function must foster relationships with both Business and Technology.

Additionally, CISOs must also think through how security is governed, what skills and talents they need, and how they interface with Business, especially in a large global company. Nalneesh is going to present on this topic at the IMF Security Forum on June 6th and 7th in Washington, D.C. He’ll focus on the specifics of designing a CISO operating model and what considerations come into play.

This two day forum will cover a variety of IT Security-related topics. View the current agenda here to find out more about speakers, topics, times, location, and more. Attendance is free as the cost is already included in your company’s all-inclusive membership. Members can register to attend the Forum by logging into TheIMF.com and visiting our Events page.

 

Facing a Cyber Pearl Harbor

January 28th, 2013

In October US Defense Secretary Leon Panetta warned that the US is facing the possibility of a “cyber Pearl Harbor”. He said that an aggressor nation or extremist group could cause a national catastrophe. The Pentagon is moving forward with a massive expansion of more than 4,000 cyber security personnel over the current 900 for both defensive and offensive purposes according to today’s New York Times.

As IT Professionals we have been talking about this problem for a long time and while it is certainly refreshing to see the Pentagon addressing these issues the challenges are huge. Imagine trying to find the skills necessary particularly with public sector constraints.  At a recent IMF meeting Karen Evans, National Director of the US Cyber Challenge discussed some of the difficulties inherent in hiring security personnel. Significantly skill set alignment overlaid with supply of personnel. Karen outlined the needed skills as:

  1. Strategy, Management etc.
  2. Operators, Testers Security Ops, Forensic Analysts
  3. Research
  4. Hunters and Tool Builders

She pointed out that demand exceeds supply in all areas but none as badly as in the category of Hunters and Tool Builders. (Email us for a copy of the presentation).

IT Security is on the agenda for our upcoming Senior Executive Forum in San Antonio at the end of February. However, we will focus solely on IT Security issues when we meet in the Washington DC area June 6th and 7th. Members will examine the topic from several aspects including how to build and govern a security-operating model. Some of our Federal Government members are on board to walk us through their challenges and actions to stay ahead of the curve. We are currently working with an “ethical hacker” who will give us a peek behind the curtain of hacker organizations to gain a better understanding of their world.

No one has all the answers, no one knows all the questions on this one but an open dialog always leads to a better understanding.

Attracting IT Talent Is Nice, But Don’t Forget About Retention

December 5th, 2012

We often hear from our members about the cost of replacing lost talent or the huge cost associated with a bad hire, yet all too often we lose focus on the importance of employee retention. This is especially true in difficult economic times. The crazy part is that many good tactics for retention are not very expensive.

A recent Wall Street Journal article listed 12 tips for employee retention and only about half of them required real investment. Some were as simple as:

  • Promote from within when possible
  • Foster employee development (one near and dear to our hearts)
  • Create open communication between managers and employees
  • Communicate the mission

One IMF member and benchmarking client takes retention and creating a fun work environment to a new level in my opinion. The first time I walked into Rackspace’s headquarters I was blown away. The place is overrun with fun; it just screams “I want to be here!” It is a converted shopping mall complete with tetherball, a slide, food trucks, college flags, and lots of smiling people. The dress code was explained to us as “you have to dress.”  I don’t know anything about their compensation model but I do know I feel excitement just walking through the building.

 

 

As part of our upcoming Senior Executive Forum* in February at the Westin La Cantera in San Antonio, Forum attendees will have a chance to see just what I’m talking about here. Rich Murr, who runs the IT Infrastructure for Rackspace, is going to lead a discussion on employee retention and take us through their facility for a tour, a slide, and maybe some tetherball.

 

*The Senior Executive Forum will be held February 25th-26th. Members can register to attend by logging into The IMF website and visiting our Events page. Click here to view the Forum Agenda.