It should be safe to assume executives at a corporation are in conversation with members of their board, but it seems some CISOs are being left out of the group chat. According to recent findings from research group IANS, 40% of surveyed security officers at small and midmarket firms reported minimal or no access to their boardroom. About 20% of the 363 pros polled said they meet with the full board at least semiannually, and 40% do so quarterly. That lack of interaction can pose a risk to an organization, according to IANS Senior Research Director Nick Kakolowski, as it could be an indicator that “the business doesn’t adequately understand the impact cybersecurity has on its overall organizational risk, that it thinks of cyber as an isolated thing.” Now introducing. When Michael Welch became CISO at OSI Group—a food supplier with over 20,000 employees and 65 global facilities—it took him 11 months to get into the boardroom. Why can’t the CISO chat with the board?—BH |