Security News > 2023 > June > Red teaming can be the ground truth for CISOs and execs

Is cybersecurity treated differently? Some would argue that while cyber is certainly a priority in boardroom discussions, execs have still yet to take full responsibility for their security posture and often silo this to SecOps teams or their CISO. Given the potential for ransomware to destabilize operations, finances, and reputation, more execs should put cybersecurity front and center on the agenda.

If you speak a truth that they understand, you'll unlock the trust, transparency and cooperation that is needed to give cybersecurity the attention it deserves at all levels of the business.

What red teams can give CISOs is the cold, hard truth of how their network stacks up against threats that could be ruinous to the business.

For CISOs, the evidence from red teams gives the who, what, when and how of how their attack surface stands up to scrutiny, with none of the negative consequences of a malicious breach.

Because red teams have the knowledge to accurately gauge how urgent of a risk each vulnerability is, the presentation can zero-in on what needs to be done immediately, keeping these discussions succinct and solutions focused.

This means cybersecurity always has its place on the agenda and there is transparency between CISOs and execs on how the organization is proactively looking to patch vulnerabilities, before an attacker knows they exists.

News URL

https://www.helpnetsecurity.com/2023/06/16/red-teams-responsibility/