Part-Time CISO: Lessons Learned

In 2008, Intrinsic launched the offer Part-Time CISO. Initially designed to offer tailored support to medium and large SMEs wishing to address the security issues of their information system without recruiting a CISO, this offer quickly met with strong interest from our clients and prospects.

Three years later, after about fifteen feedback experiences in various forms (part-time CISO, but also CISO coaching and CISO assistance) for equally varied organizations (from the private sector to the public sector, from SMEs of 100 users to international groups…), we thought it would be interesting to offer a little feedback on this privileged position to observe different approaches to IT security.

Why secure your information systems? What objectives should you define, what approach should you adopt? Where should information security and the CISO be positioned within the organization? What themes and concerns should be addressed?

We were given the opportunity to address all these topics during the "The Role of Security in the Company" session of the 2nd McAfee France User Conference. Obviously, a 45-minute presentation is far too short to cover all these topics, so we focused on the essentials!

Feel free to read our presentation, and why not get back to us to discuss it further!

Access the presentation slides by clicking here!

Happy reading and good luck 🙂