Navigating the Changing Role of CISOs: Risk Appetite, Alignment with C-Suite, and Progressive Strategies According to Netskope Research

Chief Information Security Officers are becoming more accepting of risks, but there is a need for improved alignment with other executives in the C-Suite, according to a study conducted by Netskope.

Netskope, a prominent company in the Secure Access Service Edge (SASE) field, conducted a new worldwide study revealing that changes in cyber threats have impacted how Chief Information Security Officers (CISO) assess their organization's risk tolerance. The study shows that 92% of CISOs are experiencing conflicts with their CEO and other C-suite members due to these changes, with 66% feeling pressured to balance the business' desires with security needs.

A study interviewed over 1,000 Chief Information Security Officers (CISOs) globally to examine how the role of CISO is changing to become a more strategic part of the leadership team. Despite traditional beliefs that CISOs are cautious when it comes to risks, only 16% of CISOs today consider themselves to have a low risk appetite. Interestingly, CISOs believe that their CEOs are even more risk averse, with 32% of respondents thinking that their CEO has a low risk appetite.

Further research delves into the evolving responsibilities of the Chief Information Security Officer (CISO).

The emergence of the modern, forward-thinking Chief Information

A survey found that 65% of CISOs feel that the role of a CISO is evolving quickly. They are adapting to this change by becoming more forward-thinking and innovative, thanks to the use of modern technology that enables new ways to drive innovation and make a business impact.

According to Netskope's Chief Information Security Officer, James Robinson, the research shows that CISOs are eager to take on a more proactive role in promoting innovation and safeguarding the company. He believes that the key to making CISOs effective partners within the C-suite is to understand the business challenges that their colleagues are tackling and align security strategies with those challenges, rather than imposing security measures based on assumptions about the C-suite's risk tolerance.

Frequently, enterprise teams do not align properly. However, CISOs who can clearly demonstrate how they are assisting their C-suite colleagues in generating new income, improving productivity, and complying with regulations will be seen as important members of the organization's leadership.

Steve Riley, Field CTO at Netskope, discussed a research study and noted that CISOs are becoming more forward-thinking in response to the rapidly changing landscape of business technology and cyber threats. It is positive to see that CISOs are no longer solely focused on restricting access to protect the business, but are now considering the impact on business operations as well.

Nevertheless, our research indicates that not all executives in leadership positions are prepared for Chief Information Security Officers (CISOs) to move beyond their conventional role as protectors of the business. In order to facilitate secure innovation and business evolution, security leaders must engage their peers and educate them on how concepts such as zero trust play a role in developing strategies that prioritize both security and productivity.

Netskope commissioned a research study conducted by Censuswide, which surveyed 1,031 Chief Information Security Officers (CISOs) from various industries in five different regions: the UK, North America, France, Germany, and Japan. The sectors included in the study were healthcare, retail, finance, and industry.

The complete report, which includes further analysis of the views of CISOs on industry trends, can be found here.

Other articles from various sources include Radiflow and Garland Technology teaming up to improve real-time anomaly detection in operational technology environments. GlobalData notes that advancements in flexible electronic circuits can contribute to climate change efforts. The growth of smart metering in the Asia-Pacific region is ongoing. Projections for the growth of the E-Scrap and Printed Circuit Board (PCB) E-Scrap Market are positive. Trends and future developments in Power Management Integrated Circuits (PMICs) are being explored. Netskope Threat Labs reports on threat actors targeting cloud apps in the telecoms industry. An interview with STMicroelectronics discusses their microcontroller innovations and ultra-low power MCUs. STMicroelectronics continues to promote innovation in the industry. Their commitment to empowering edge AI innovation is highlighted. STMicroelectronics is also advancing power electronics for aircraft electrification. STM32 MCUs from STMicroelectronics support wireless connectivity. Keysight World Tech Days annual conference will be held in Bengaluru. PEMTRON will showcase advanced inspection systems at ASPS in Korea. An INSPIRE Faculty Fellow is enhancing RF & Microwave Devices for satellite technology.