Are firms wising up to the business of security?

 

Summary

More companies than ever are employing a dedicated chief security officer as the number of threats facing business continue to rise.

Events

Social Media World Forum
22 - 23 Sep 2010

Suntec, Singapore

Asia CXO Leadership Summit - Singapore
7 Sep 2010

Marriott Hotel, Singapore

Governmentware 2010
28 - 30 Sep 2010

Suntec, Singapore

The 5th Annual CIO Forum Asia
28 Sep 2010

Singapore

Social Media Marketing and Measurement

6 - 7 Sep 2010
Parkroyal, Singapore

9 - 10 Sep 2010
Regal Hongkong Hotel, Hong Kong

IDC's Asia/Pacific Cloud Computing Conference 2010
31 Aug 2010

Marriott Hotel, Singapore

More companies than ever are employing a dedicated chief security officer (CSO) as the number of threats facing business continue to rise.

The CSO is also taking increasing responsibility for compliance as the regulatory landscape becomes more daunting, according to one leading security executive.

Research from the Economist Intelligence Unit shows the number of CSOs taking ultimate responsibility for the security of a business has almost doubled year-on-year. Although the CIO still has sign-off on security decisions in 30 percent of organizations, 12 percent of respondents said they now have a CSO who assumes that responsibility. This is up from seven percent last year.

Denis McCauley, director of global research at the Economist Intelligence Unit, told silicon.com: "The status of the CSO is rising."

And with the rise of the CSO comes a closer relationship between security and the core business, according to Martin Carmichael, CSO at McAfee.

Carmichael told silicon.com: "I think CSOs should be more business focused. The CSO has to be a very unique person. They have to understand the technologies but while I could go on about cryptography and prime number theory there isn't a CEO in the world who wants to have that conversation."

"We need to be able to communicate in business language, not technical language," said Carmichael.

CSOs must also learn to deal in risk and not the absolutes of 'secure' or 'insecure' which may be the traditional mindset of CIOs and IT managers.

'Acceptable risk', based on business needs and budget are a more realistic objective for the CSO, said Carmichael.

"I can harden an environment to the nth degree but I can't afford that," said Carmichael of the realities of his role, adding that CIOs and IT managers who progress into the CSO role often have "an epiphany" when they realize the world can no longer be divided into 'secure' and 'insecure'.

The EIU research also revealed that the share of IT budget being spent on security has increased from 15 percent to 18 percent year-on-year.

"The seriousness and severity of security threats is perceived as being on the rise," said the EIU's McCauley.

Will Sturgeon of Silicon.com reported from London.

Talkback

I think you have astutely identified an important industry trend in global security management. The Chief Security Officer (CSO) is an increasingly important stakeholder in enterprise viability and profitability. CSOs at their best bring together: (1) executive leadership skills; (2) business knowledge and acumen; (3) vision and awareness of trends practice, policy, and technology; (4) understanding and adaptation to information technology and security requirements; (5) organizational behavior management skills; (6) and last, but not least, political aptitude to navigate the sea of fiefdoms from law enforcement, to military, to political boundaries. In the end, CSOs that can successfully manage the convergence of information security and physical security requirements can safeguard the enterprise and add to the operational bottom-line with labor-saving productivity increasing technologies and state-of-the-art decision-making tools (e.g., dashboards). I hope you will continue to write on this topic as it is an important one and needs refinement and continual review.

Anonymous April 12th, 2007 Reply
Add your opinion

In order to post a comment, you need to be registered. (Sign In or register below)

Post your comment
HP Data Protector delivers high-performance data protection at up to 70% lower TCO.
Tech Vendor: HP
Did you know?
Did you know?

ZDNet Asia Live

RT @RehaAlev: Twitter to record all links users click http://bit.ly/94hGHx

Using Parallel class for simple multithreading http://bit.ly/bZ3hpf

35 minutes ago by kittirak on topsy

need more

1 hour 10 minutes ago by jepsy on Is it too late to introduce 3G in India?

Using Parallel class for simple multithreading: In this programming tutorial about Parallel Exte... http://bit.ly/c0g5Wi - #AsiaToday #News

RT @Colasoft: RT @zdnetasia: 12 most recommended network monitoring tools http://bit.ly/9KWQ96

RT @WilliamLark: Facebook adds new remote log-out security feature: Facebook users who log in from multiple devices will soon have ... http://bit.ly/ai5asr

Facebook adds new remote log-out security feature: Facebook users who log in from multiple devices will soon have ... http://bit.ly/ai5asr

3 hours 40 minutes ago by williamlark on topsy

Samsung: Galaxy Tab has leg up on Apple iPad http://bit.ly/9OPPUy

Samsung: Galaxy Tab has leg up on Apple iPad http://bit.ly/aD9zXt | #Droid #Android

Toshiba recalls 41,000 laptops for overheating: U.S. Consumer Product Safety Commission says 129... http://bit.ly/axqc2a - #AsiaToday #News

RT @zdnetasia: 12 most recommended network monitoring tools http://bit.ly/9KWQ96

Google, AOL renew search deal: Under the arrangement, Google provides search for AOL and the com... http://bit.ly/bif9sl - #AsiaToday #News

Acer comes back down to earth, Dell rises: Fastest-growing PC company of the last few years stum... http://bit.ly/byByP7 - #AsiaToday #News

Securing consumer gadgets in the workplace: By Nick Heath, Silicon.com on September 3, 2010 (2 minutes ago) news a... http://bit.ly/ad12aw

Securing consumer gadgets in the workplace: By Nick Heath, Silicon.com on September 3, 2010 (2 minutes ago) news a... http://bit.ly/97Jth5

5 hours 19 minutes ago by wizmole on topsy

Google, AOL remplacent l'affaire de recherche - ZDNet Asie: Google, AOL remplacent le dealZDNet Asie de re... http://bit.ly/dy9zaw #musique

5 hours 31 minutes ago by lafiliere on topsy

I recommend checking 5pm for a good project management tool. (www.5pmweb.com). It makes the team collaboration easy and is friendly enou...

6 hours 29 minutes ago by Erica on Agile drivers for new project management tools

I am a student researching piracy for my computer course. My mother owns an epublishing company. Ebook piracy is also a huge problem in h...

6 hours 42 minutes ago by tasha6669 on SaaS no silver bullet for piracy

For more information regarding the lawsuit and the patents involved, check out Sunlight Research's upcoming webinar "Will Oracle’s Java...

13 hours 6 minutes ago by Sunlight on Legal woes no impact on Android ecosystem yet

Google search does not seem to be made for 5 years old kids,anyway your child will learn to say and understand the meaning of this senten...

23 hours 20 minutes ago by irajjs on Facing reality from a Google search about Echo of Amboseli

Another project software is http://www.proofhub.com/. I have used it and it is really good. It contains many new features which you can u...

1 day 16 minutes ago by Barry on Check out Project alternatives: Basecamp and QuickBase

But iTunes music does not apply to Asia. We STILL CAN'T BUY music from iTunes!!!

1 day 10 minutes ago by maxxtotal on Study: Music, not apps, rules iTunes

Sadly, asia will probably not get it ...

2 days 13 minutes ago by mingnow on Apple TV to launch with Netflix

I read a great deal of blogs, and I have not come across an article that articulates these points so well.

2 days 41 minutes ago by barbaragabogrecan on Is NBN really needed in Australia?

The project is very much pro India & may be necessary. But I think it is too futuristic for India which lacks even basic information secu...

3 days 43 minutes ago by amit039 on Should India now look forward to unique ID cards?

Hamein Malum Hai Jannat ki Haqiqat Lekin Ghalib, Dil Behelane ko Khayal Achcha Hai As kids and as people who do not want to learn about ...

3 days 43 minutes ago by deepak.sogani on Facing reality from a Google search about Echo of Amboseli

Check out this article on using the Droid X in the Enterprise: http://forum.maas360.com/go/mobileitexpertise/the-x-factor-my-first-week-...

3 days 41 minutes ago by dlima on Five Android apps for enterprise users

I total agree that being married does not automatically make a person a better boss. Neither would I say being single makes you better re...

3 days 59 minutes ago by mingnow on Being married doesn't make one a better boss

A very painful way of getting introduced to death. I remember watching 'haati mera saati' around the same age and weeping for day...

4 days 39 minutes ago by Benno on Facing reality from a Google search about Echo of Amboseli

I have had to good fortune to use all operating Systems (OS) listed in your article, including Solaris. For the most part, I derive the m...

4 days 31 minutes ago by wanderson on 10 differences between Linux and BSD