Staff, C-suite disagree on how security drives innovation>
Expel – Greg Notch
The importance of security in innovation is a topic explored in the report “Security-enabled innovation and cloud trends” by the Cloud Security Alliance (CSA).
While in the past, security was often seen as a hindrance to innovation, the mindset has shifted, with organizations now recognizing security as a competitive advantage and integral to product development and cloud strategies.
However, the report also identifies a disconnect between the attitudes of leadership (C-suite) and security staff.
According to the research, leadership understands the importance of security, with a significant percentage associating it with product development, cloud strategy, competitive advantage, and innovation.
In contrast, security staff have a less optimistic view, perceiving security as less involved in those areas.
This discrepancy highlights the need to bridge the gap between leadership and security teams.
The report suggests that Chief Information Security Officers (CISOs) can play a crucial role in addressing this disconnect.
To be effective, CISOs should speak the language of business and translate security knowledge into information that helps the board and C-suite make decisions.
Conversely, they should also distill strategic conversations happening at the leadership level into actionable strategies for security staff.
CISOs can use their technical expertise to align security objectives with the organization’s overall strategic plan.
By contextualizing viewpoints and emphasizing the role of the security staff in innovation, CISOs can foster a culture of innovation across the organization.
The report emphasizes the importance of perspective, as C-suite executives have a broader view of company initiatives, while security staff concentrate on day-to-day operations.
Additionally, company culture plays a role, as organizations that treat security as an enabler are more likely to have team members who perceive it as such.
In conclusion, closing the gap between leadership and security staff, understanding different perspectives, and fostering a culture that values security as an enabler are essential to effectively integrate security and innovation within organizations.
Link: https://expel.com/blog/staff-c-suite-disagree-on-how-security-drives-innovation/