Preview Mode Links will not work in preview mode

Defense in Depth


Nov 18, 2021

All links and images for this episode can be found on CISO Series

In most jobs there’s often a clear indicator if you’re doing a good job. In security, specifically security leadership, it’s not so easy to tell. “Nothing happening” is not an effective measurement. So how should security performance be graded?

Check out this post for the basis for our conversation on this week’s episode which features me, David Spark (@dspark), producer of CISO Series, co-host Geoff Belknap (@geoffbelknap), CISO, LinkedIn, and our guest is Deneen DeFiore (@deneendefiore), CISO, United Airlines.

Thanks to our podcast sponsor, Tessian

Thanks to our podcast sponsor, Tessian

In this episode:

  • How should security performance be graded?
  • Is "keeping it simple" the best option?
  • What's the best measurement option?