As a chief information security officer, it would be my duty to protect my organization’s data from cyber threats/ or unauthorized access. In order to protect my organization, there are certain measures I would take. First, I will have programs in place whose purpose is to track and monitor threats in order to eliminate prevent a threat from even occurring to my organization. I would also make sure that I have hired a competent team of security professionals to be able to operate the programs so that they can effectively detect threats. This means I would pick employees with Cybersecurity Education, while also making sure that they do not have a history of nefarious or unethical actions through background checks. In addition, I would mandate that all staff and customers use 2-factor authentication and ensure that people can only access what they should access. Another way I would protect my company is by making sure my knowledge about new technology is up-to-date, so that my organization does not fall behind in the ever evolving world of Cybersecurity.
In regards to the business side of my job, I would make sure that my department within my organization is receiving adequate funding. Without adequate funding, I could not hire competent employees that will protect the organization, thus putting my organization at risk for threats. I would also seek help from outside the company by sending out surveys to customers to see if they are always able to access data. Lastly, I would do hire a team whose purpose is to penetrate my organizations defenses. I though of this by taking inspiration from Apple. People who find any issues or weakness that can allow for unauthorized data access, Apple would thank them and give then a reward for submitting their findings. I would do this so that my organization can target threats quickly and effectively. This lets us fix our errors, thus minimizing threats and allowing us to learn from our mistake to do better in the future. Robinhood also made a good example of this because in prior years they have had a lot of glitches with their app and people were able to scam the app in a way that gave them double their money so they can trade stocks without any consequences. This plan, when put together and in motion, will drive away anyone who attempts to break in, and provide customers with optimum safety.