Peer-Driven Insights

Security Strategy & Roadmap

Active Ambassadors in This Topic

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

Community Posts

Yes, this will discourage attacks.76%

No, as the victim's customers are also impacted by ransomware attacks.23%

Secureframe16%

AuditBoard5%

Something else -- I'll tell you in the comments6%

We’re not using a GRC platform22%

View Results

Yes; I had to take extended time off to recover18%

Yes; but I kept working anyway56%

Almost; I was able to catch it early and made changes17%

No; I have not experienced extreme stress or burnout8%

View Results

Active Ambassadors in This Topic

Rathik Pathak

Community Posts

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

What would be the strategy to raise awareness among small businesses about investing in Cybersecurity?

As organizations deploy LLMs and other AI systems, how do you recommend security teams address risks such as data leakage, prompt injection and adversarial manipulation? What frameworks or practices should be prioritized to make AI security programs resilient from day one?

Looking to benchmark. If you are in-process of pursuing the ISO 42001 or have obtained it, how have you measured the business value?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too? Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

How are your companies addressing Insider Threats?

Can a ban on ransom payments stop ransomware attacks?

What platform are you using for GRC?

Do you allow access to workday/HR application outside of InTune or another MDM tool?What is your policy for hourly employees accessing Workday ‘off hours’? How is this policy managed?

Have you experienced extreme stress or burnout while working in cybersecurity?

What requirements have you used to evaluate and select a SAAS SPM tool?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Community Posts

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

What would be the strategy to raise awareness among small businesses about investing in Cybersecurity?

As organizations deploy LLMs and other AI systems, how do you recommend security teams address risks such as data leakage, prompt injection and adversarial manipulation? What frameworks or practices should be prioritized to make AI security programs resilient from day one?

Looking to benchmark. If you are in-process of pursuing the ISO 42001 or have obtained it, how have you measured the business value?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too? Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

How are your companies addressing Insider Threats?

Can a ban on ransom payments stop ransomware attacks?

What platform are you using for GRC?

Do you allow access to workday/HR application outside of InTune or another MDM tool?What is your policy for hourly employees accessing Workday ‘off hours’? How is this policy managed?

Have you experienced extreme stress or burnout while working in cybersecurity?

What requirements have you used to evaluate and select a SAAS SPM tool?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too?

Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

Do you allow access to workday/HR application outside of InTune or another MDM tool?

What is your policy for hourly employees accessing Workday ‘off hours’? How is this policy managed?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too?

Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

Do you allow access to workday/HR application outside of InTune or another MDM tool?

What is your policy for hourly employees accessing Workday ‘off hours’? How is this policy managed?