26
Digital Guardian CISO Mentoring Webinar Series Landing Your First CISO Job 1

Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Digital Guardian CISO Mentoring Webinar SeriesLanding Your First CISO Job

1

Page 2: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

About Steve Katz

▪ Recognized as the “World’s First CISO.”

▪ Wealth of experience including Citigroup, JP Morgan, Deloitte, and Kaiser Permanente

▪ Founding member of the Financial Services Information Sharing and Analysis Center

▪ Testified in front of Congress to provide analysis on information security issues

▪ Currently an executive advisor to Deloitte’s Security & Risk Practice and runs a security executive consulting practice

Confidential 2

Page 3: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

About Bill Bradley

Confidential 3

Bill BradleyDirector, Product Marketing

▪ Leads Product Marketing for DLP

▪ 20 Years of Marketing & Sales Experience• Field Sales, Competitive Analysis,

Product Marketing & Management

▪ Previously at Rapid7 and General Electric

Page 4: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Why Do You Want It & What Does it Take

Steven Katz

Landing Your First CISO Job

Page 5: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

How Did It Happen To Me

• First National City Bank – Step #1

• Morgan Guaranty/JPMC – Step #2: Making Infosec Understandable

• Citicorp/Citigroup – Step #3: It’s all about Business Risk

Page 6: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Questions for the CISO Wannabe

• Why do you want to be a CISO?

• What are your strengths/skills?

• How strong are your soft skills?

Page 7: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Questions for the New CISO

• Why should your company have a security program?

• How does your company generate revenue?

• Who are the key executives?

• Who is on the board?

• How do you plan to market yourself and your program?

• Are you ready to be the CEO of your information security company?

Page 8: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Types Of CISOs

The Reactor/Fire

FighterThe Monitor

The Technologist

The Enabler

Page 9: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Where Should The CISO Report

• CIO/CTO

• CRO

• General Counsel

• General Auditor

• CEO

Page 10: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Digital Guardian CISO Mentoring Webinar Series

10

Page 11: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Schedule

▪ Session 1 - Digital Guardian to Up Your Game

▪ Session 2 - Digital Guardian and Strategic Data Protection

▪ Session 3 - Digital Guardian and Documented Improvement

Page 12: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Digital Guardian to Up Your GameInsider and Outsider Risk Views

12

Page 13: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Where is Your Focus?

13

CAD

Page 14: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Where is Your Focus?

14

CAD

Page 15: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Where is Your Focus?

15

CAD

▪DLP – Internally Focused

▪EDR – Externally Focused

Page 16: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Where is Your Focus?

16

▪DLP – Internally Focused

▪EDR – Externally Focused

▪Risks to Your Data Come From Anywhere

▪Multiple Tools → Gaps

CAD

Page 17: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

First & Only Unified Internal & External Risk Visibility

17

Endpoint Detection

& Response

Data Loss

Prevention

User & Entity

Behavior Analytics

Single Console; Single Agent

Page 18: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Digital Guardian Focuses on the Data

▪ No Policy, No Problem

▪ Immediate Visibility into Events System, User, Data Events

18

Page 19: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Data Loss Prevention - Visibility

19

Page 20: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Endpoint Detection & Response - Visibility

20

Page 21: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

DLP and EDR – Real Time Responses

21

Page 22: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

DLP and EDR – Real Time Responses

22

Page 23: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Digital Guardian Sees All Risks to Your Data

23

Page 24: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

Digital Guardian Expands Your Perspective

▪ InfoSec Analysts Now See External Risks

▪ Threat Hunters and Incident Responders See What Data is Targeted

▪ Result: Each Role Can Do Their Job Better

24

Page 25: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

A Recognized Leader.Just ask Gartner and Forrester

Digital Guardian is the only Leader in both Enterprise Data Loss Prevention and

Endpoint Detection & Response

Magic Quadrant Leader Wave Leader

Page 26: Digital Guardian CISO Mentoring Webinar Series · 2018-10-29 · •Morgan Guaranty/JPMC –Step #2: Making Infosec Understandable •Citicorp/Citigroup –Step #3: It’s all about

QUESTIONS?