An Effective Security Culture Starts at the Top

New CISOs may find themselves wondering where to start when selected to lead information security. Enterprise risk management and communication skills are essential to ensure an effective program. The goal is to protect your organization while enabling the business and reducing cybersecurity risk to an acceptable level. An effective information security culture is needed at the highest level to ensure proper tone. When cybersecurity is noted as a business enabler by the board and executive management, a security culture at all levels results in assets that are better protected.