{"id":293,"date":"2025-04-07T01:22:24","date_gmt":"2025-04-07T01:22:24","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/?p=293"},"modified":"2025-04-07T01:22:24","modified_gmt":"2025-04-07T01:22:24","slug":"theoretical-question-if-you-were-a-ciso-with-a-limited-budget-how-would-you-navigate-the-current-cybersecurity-landscape","status":"publish","type":"post","link":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/2025\/04\/07\/theoretical-question-if-you-were-a-ciso-with-a-limited-budget-how-would-you-navigate-the-current-cybersecurity-landscape\/","title":{"rendered":"Theoretical Question: If you were a CISO with a limited budget, how would you navigate the current Cybersecurity landscape?"},"content":{"rendered":"
As a Chief Information Security Officer (CISO) with a limited budget, I would do my best to balance spending between employee training programs and new technology. Since human error and workplace deviance are of the biggest causes of cybersecurity threats, I would allocate a good portion of the budget to annual or semi-annual cyber threat awareness training. While I was in the Navy, we were required to have training like this twice a year. A big part of this training was being able to identify phishing scams, using strong passwords, and following security policies. I would do the same for my company if I were the CISO.
\tAs for technology, I would invest in essential security tools like firewall software and multi-factor authentication. These technologies can help prevent threats from slipping through the first layer of security. To keep costs down, I would purchase automated threat detection software and cloud-based solutions that offer strong security, such as CrowdStrike Falcon (which I just learned of today), and Microsoft Sentinel. Both use AI-driven technology to detect cyber threats.
\tWe have read about examples where even the biggest companies can fall victim to cyber-attacks, so we know that no system is 100% foolproof. However, even on a budget, I can create a layered security system through basic awareness training and security technology.
","protected":false},"excerpt":{"rendered":"

As a Chief Information Security Officer (CISO) with a limited budget, I would do my best to balance spending between employee training programs and new technology. Since human error and workplace deviance are of the biggest causes of cybersecurity threats, I would allocate a good portion of the budget to annual or semi-annual cyber threat… <\/p>\n

Read More<\/a><\/div>\n","protected":false},"author":30582,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":1},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/posts\/293"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/users\/30582"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/comments?post=293"}],"version-history":[{"count":2,"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/posts\/293\/revisions"}],"predecessor-version":[{"id":297,"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/posts\/293\/revisions\/297"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/media?parent=293"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/categories?post=293"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/wt-beiser9\/wp-json\/wp\/v2\/tags?post=293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}