Security leadership will never be able to address all security barriers. However, the more they can address a handful of issues incrementally, the better their cybersecurity performance will be over time.
Even under the best of circumstances, the day-to-day work of combating threats and mitigating cyber risk is difficult. Unfortunately, many security professionals work in situations where there is more friction, making it more difficult to perform their tasks efficiently.
Company culture, procedural limitations, and resource constraints are just a few examples of what can prevent security professionals from making substantial progress in enhancing a company's cyber security posture. Following are the five most prevalent barriers that prevent them from working on cyber security on a daily basis.
Reporting Structure
One factor that makes it difficult for some CISOs to be effective in their roles is their reporting structure. Reporting structures that are out of whack can have a significant impact on how security work is directed, and funded, and how much political capital CISOs have to achieve genuine change in the company.
If they report to the CIO, for example, the CIO’s aims and objectives are frequently at odds with the CISOs. Reporting to the CFO can prove to be tricky, and not simply because CFOs are so focused on the bottom line. The CFO’s perception of risk differs significantly from that of the CISO, and this disparity can be a cause of friction on a daily basis.
Full article: Top Five Roadblocks Faced by CISOs When Handling Enterprise Security
