Cecilia Hans

Our article titled “Perceptions of Digitalisation and Cyber Security: Impacts on Organisational Practices through the NIST Cybersecurity Framework” has been published in the Journal of Decision Systems (Taylor & Francis Group)! In this study, we examined cybersecurity perceptions and organizational practices during the digital transformation process, using the NIST Cybersecurity Framework v2, which was released in 2024, as our foundation. Insights from 124 professionals across various sectors reveal a significant gap between perceived awareness and actual readiness. The cyclical structure of the updated NIST CSF also highlights how it can enhance organizational cybersecurity maturity. As digitalization accelerates with AI and IoT, the need for proactive and adaptive strategies becomes increasingly important. Full article: https://lnkd.in/dRURbJmX Many thanks to my co-authors Assoc. Prof. Burcu Kör and Assoc. Prof. Nazim Taskin for their valuable collaboration. I believe the cyclical nature of the NIST Cybersecurity Framework v2 should be seriously considered as a foundational element for effectively implementing organizational cybersecurity. #Cybersecurity #DigitalTransformation #NISTCSF #Research #JournalPublication

80

3 Kommentare

🌟 2025-2028: An era of transformation for #CISOs Based on discussions with numerous cyber professionals in the #US 🇺🇸 and #Europe 🇪🇺, I believe the next three years will be defining for my #CISO friends and clients. The role of Chief Information Security Officers will undergo profound changes. Let's delve into four pivotal shifts: 1️⃣ Skyrocketing salaries 💵: The ongoing talent shortage and the still-less-than-glamorous appeal of the #cybersecurity sector will drive salaries through the roof. The job's immense pressure and the need to prepare for personal cyber-liability insurance coverage (when not covered by D&O insurance policies) will further fuel this trend. Additionally, expect increased scrutiny by regulators around CISO equity and bonuses💰 to ensure CISOs remain motivated to report incidents transparently. 2️⃣ Splitting the #CISO Role 👥: The system of lines of defense is gaining popularity across all sectors, not just finance. Many CISOs are shifting to a second-line role focused on strategy, risk management, and assurance/testing 🔎. Consequently, we're seeing the emergence of technology-focused CISOs under the #CIO, responsible for execution. For years, we've debated whether the CISO should report to the risk officer or the CIO. Now, it's both... with two distinct individuals 📈 3️⃣ #CISO Stratification 🧭: Companies are increasingly choosing their CISOs based on their current cybersecurity posture. Post-incident? They call in crisis CISOs to manage the fallout🔥 Facing regulatory pressure? They hire remediation CISOs to build large-scale cybersecurity plans. In stable times, BaU CISOs keep things running smoothly. This shift is creating clear tiers within the profession, with distinct profiles emerging 👥 - and driving faster turnover as organizations switch leaders to fit the moment. It’s especially true in U.S. banks, where the average CISO tenure is now just 30 months! 4️⃣ Evolution to #CSO: Cybersecurity functions are increasingly overlapping with other security domains like product security, e-fraud, IT risk, and operational resilience 🌐. Businesses are demanding more coherence in security practices, and some areas like #InsiderThreat are managed inconsistently. In the next three years, we'll likely see key services extending beyond cybersecurity, such as Fusion Centers (an evolution of SOCs🔎) and Business Intelligence (an extension of #ThreatIntelligence). The good news is that the CSO is now perfectly positioned to integrate #IAM, which has been neglected for years in the organization ;-) These predictions are not just about salary or minor changes but signal a paradigm shift in how we perceive and value the role of cybersecurity leaders 📈. #CISOs are not just tech guardians; they are strategic business enablers and risk managers! Let's watch these predictions unfold in the next three years and prepare to support our CISO community! 🎯 #GetReady #Transformation

114

7 Kommentare

When budgets are shrinking, they are not growing in proportion to increasing demands or threats. CISOs (especially in the financial services but not limited to) must continuously justify their current spending while struggling to secure additional funding for essentials such as automation and cloud security. The big challenge is the tension between focusing your budgets on: 1. Innovative solutions that incorporate artificial intelligence (AI) and machine learning (ML), versus 2. Ongoing regulatory remediation given the regional / global uptick in new cyber rules and standards. #kpmgsaudi #kpmgcyber #kpmgfs #kpmgbanking #cisospending #cisobudget

42