The Information Security Network

In addition to the ever changing issues around governance and compliance, organisations are becoming victim to increasingly sophisticated threat campaigns. It’s a balancing act for a CISO of today to protect data and manage vulnerability whilst overcoming regulation and compliance pressure; what systems to use and what resource to allocate without detriment or burden to the other
While regulatory compliance reigns as the primary focus for investments the real threat to the company is increasingly becoming the user. CISOs have been dictating policy and preaching the dangers of external attacks and tricks commonly used by outside threats and users have received the message. However, time and time again users will continue to break policy and put the company at risk