CISO (Stakeholder - IAM)

Owned by David Doret
Last updated: 26-38-2020
1 min read

Title

CISO

Synonyms

Chief Information Security Officer, Data Protection Officer, Security Officer

Description

The CISO persona may be used as an umbrella for everything that is related to InfoSec governance. To be distinguished from the Information Security (Stakeholder - IAM) persona that designates InfoSec operations.

Interests

  • Entitlement review and certification

  • Identity/account reconciliation

  • Secured management of privileged accesses

  • Fast revocation of accesses and identities

  • Robust authentication mechanisms

Opportunities

  • Co-develop standards and requirements

Risks

  • May get into skirmishes with Business Lines and Marketing over the balance between good customer experience and effective security (Maxim and Cser, 2017, p. 4)

Sources

See Also

 

Follow us on LinkedIn | Discuss on Slack | Support us with Patreon | Sign-up for a free membership.

This wiki is owned by Open Measure, a non-profit association. The original content we publish is licensed under a Creative Commons Attribution 4.0 International License.