CISO

Chief Information Security Officer, Data Protection Officer, Security Officer

The CISO persona may be used as an umbrella for everything that is related to InfoSec governance. To be distinguished from the https://open-measure.atlassian.net/wiki/spaces/STAK/pages/81102370 persona that designates InfoSec operations.

• Entitlement review and certification

• Identity/account reconciliation

• Secured management of privileged accesses

• Fast revocation of accesses and identities

• Robust authentication mechanisms

• Co-develop standards and requirements

• May get into skirmishes with Business Lines and Marketing over the balance between good customer experience and effective security (https://open-measure.atlassian.net/wiki/spaces/BIB/pages/3112978, p. 4)

• https://open-measure.atlassian.net/wiki/spaces/BIB/pages/3112978, p. 4

• , p. 58

• , p. 53