Cyber Defense eMagazine February Edition for 2023

experiences a high churn rate because cyber jobs are often thankless and high-stress. The need for
quality cybersecurity talent is growing rapidly – and demand will only heighten. Recent research shows that
there were 465,000 unfilled cybersecurity roles in the U.S. last year, and this pattern is unlikely to change
any time soon.
Successful cybersecurity for organizations requires steady processes, procedures, and a solid team, all
which can be difficult to establish in the current landscape. CISOs often find that Managed Security
Service Providers (MSSPs) can be the answer to this workforce challenge, offering an efficient approach
to ensure cybersecurity needs are handled across the organization. When trying to balance the costs of
hiring and training an industry with high turnover, MSSPs provide expertise and stability that is worth the
cost.
2. Cybersecurity is everyone’s job
While a CISO’s focus may be on attracting and retaining cybersecurity talent, it is equally vital to establish
a culture of security in the organization, from the C-suite down. Successful CISOs ensure every employee
plays a role –and takes pride – an organization’s cybersecurity. A strong cyber message needs to start
at the top, but everyone in the organization needs to take part and buy in to build effective cyber defenses.
CISOs must recognize the human element to cybersecurity. On an individual level, cybersecurity can
affect paychecks, job security, and more. It is up to the CISO to not only establish a culture of security,
but to help every employee take ownership and pride in it.
3. The CISO role is about communication
The modern threat landscape has made it more important than ever for cybersecurity to have a seat at
the table when it comes to organizational decisions. CISOs must have the ability to communicate with
board members, fellow C-Suite members and cybersecurity teams, and the employee base as a whole.
This also means the know-how to tailor a message to each audience and deliver at the appropriate time
to convey the importance of cybersecurity across the organization. Getting buy-in means convincing
stakeholders of the importance of cybersecurity, while also realistically setting expectations for risk.
Lastly, CISOs can’t accept a breach as inevitable. If a CISO accepts they will be successfully breached,
they aren’t doing their job effectively. The simplest things matter when it comes to building effective
defenses. This includes making sure employees are updating passwords by implementing robust
password policies, updating latest software versions, and maintaining logs. It also means investing in
talent today to prevent breaches tomorrow. Just like with web and HTML designers in the 1990s, CISOs
should look for the best person for the job – and sometimes their best bet may be relying on partners
(like MSSPs) to help with the day-to-day.
Cyber Defense eMagazine – February 2023 Edition 154
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.