A big thing for publicly traded companies is that they are subject to public scrutiny and are therefore more closely watched because the public tends to have a stake in the company. As CISO, I would focus on incident response and developing a plan if the network went down, as well as crisis management with any other problems regarding our cybersecurity. The primary reason for this is because It is important for business continuity to be able to handle and avert crisis. We saw the importance of this recently when Crowdstrike ($CRWD), recently underwent a cybersecurity crisis and their stock plummeted over 20%. As CISO, I’d also place a large focus on adhering to regulations and ensuring my company is complying with these regulations to avoid being probed by regulatory agencies. I’d also conduct very frequent vulnerability tests to ensure our systems are up to date and protecting our sensitive information that other may try to access with malicious intent. I agree that data availability is very important for a successful business and more so for one that gets traded in the New York Stock Exchange. While you cant account for all possible cyber threats, as the CISO, it is important to have data backup in case the main data center becomes jeopardized in anyway, albeit a natural disaster or a targeted attack. Also, I noted coding for erasure, because if anyone tried to tamper with either from inside a company or outside with the data, there are several ways to essentially build the puzzle with various data segments stored in multiple locations. Having a disaster recovery plan is important to the continuous flow of information throughout a business and ensure that it is not interrupted for more time than necessary for essential business functions.<\/p>\n","protected":false},"excerpt":{"rendered":"
A big thing for publicly traded companies is that they are subject to public scrutiny and are therefore more closely watched because the public tends to have a stake in the company. As CISO, I would focus on incident response and developing a plan if the network went down, as well as crisis management with… <\/p>\n