Where's the CISOs? - missing from more than a third of Fortune 500
.jpg)
An astonishing 38 percent of the 2019 Fortune 500 do not have a chief information security officer (CISO), according to a damning new report.
Of this 38 percent only 16 percent (30/190) have another executive that is listed as responsible for cybersecurity strategy, such as a vice president of security. Only four per cent of the 62 percent majority that do indeed have CISOs actually list the role on their company leadership pages.
A separate report by Brian Krebs found the situation even worse on a global basis with just five percent of the top 100 companies having a CISO.
In addition, the Bitglass report found that 77 percent of the Fortune 500 do not mention on their websites who is responsible for security strategy, and 52 percent do not have any language relating to customer or partner data protection.
"Corporate social responsibility initiatives have made it onto the websites of the Fortune 500, but research has shown that the same level of importance is not being given to publicly demonstrating commitment to cybersecurity initiatives," said Anurag Kahol, chief technology officer of Bitglass. "Lax security and its resulting breaches have long-term repercussions for organisations as well as their customers, shareholders, partners, and other stakeholders. Members of the Fortune 500 should be focused just as much on protecting personal data and consumer privacy as they are on other areas of social responsibility."
The report from Bitglass, ‘Cloudfathers Fortune 500 Cybersecurity Report’ scanned the websites of Fortune 500 companies for key cyber-security phrases, job titles and security mission statements.
Levels of engagement with security practices varied widely by industry vertical, with aerospace, finance and technology firms considerably outpacing peers in the hospitality, construction and oil and gas industries.
The transportation industry segment of the Fortune 500 sees the vast majority (57 percent) of its companies listing an executive as responsible for cyber-security strategy, while aerospace industry (33 percent) and the insurance industry (30 percent) rank second and third. A massive 89 percent of organisations in the aerospace industry provide detail about data protection for their customers and partners, followed by finance (72 percent) and technology (66 percent).
However, none of the Fortune 500 hospitality companies listed a cyber-security strategy executive at all, and this poor performance was echoed in the manufacturing and telecommunications industries, which managed a mere eight per cent and nine per cent respectively. Construction, oil and gas, and hospitality industries all managed to provide details about how they protect customer and partner data - in 25 percent of cases.
Although Europe-wide regulations such as GDPR require enterprises that process large volumes of customer data to internally nominate a Data Protection Officer (DPO), there is no stipulation that they should be publicly visible.
In an Opinion article by Sean Duca, regional chief security officer for Asia Pacific, Palo Alto Networks, to be published by SC Media UK later this month, Duca comments: "If a company isn’t able to see cyber-security as a strategic business investment, it will not involve the people responsible for cyber-security as part of the strategic team. Equally, if those at the forefront of cyber-security are not part of the executive team, the organisation won’t have the knowledge or commitment to treat cyber-security as a strategic investment."
source scmagazineuk
Industry: Cyber Security
Latest Jobs
-
- Microsoft Security Operations Analyst | Bracknell | SC Clearable | SC-200
- Reading
- N/A
-
Senior SOC Analyst Level 2 / 3. Microsoft Security stack | SC Clearable Location: Hybrid remote | Berkshire SC-200 Senior SOC Analyst Level 2 / 3 to join a specialist Managed Security Services business. You will be responsible for advanced threat hunting / triage, incident response etc with a strong focus on the Microsoft Security Stack. Key Responsibilities: Lead and resolve complex security incidents / escalations Conduct advanced threat hunting using the Microsoft Security Stack. Build, optimise and maintain workbooks, rules, analytics etc. Correlate data across Microsoft 365 Defender, Azure Defender and Sentinel. Perform root cause analysis and post-incident reporting. Aid in mentoring and upskilling Level 1 and 2 SOC analysts. Required Skills & Experience: The ability to achieve UK Security Clearance (SC) - existing clearance ideal. (Sorry no visa applications) Must have current experience working with a SOC environment Key experience must also include, but not be limited to Development and tuning of custom analytic rules. Workbook creation and dashboarding. Automation using Playbooks and SOAR integration. Kusto Query Language (KQL).
-
- Service Architect- DACH regions
- Germany
- Upto €110,000 plus bonus and benefits
-
Lead Service Architect with the authority and experience to take control of complex, multi-million-euro outsourcing bids. This role is about leading the Service/ solutioning effort, bringing structure to chaos, and driving the entire bid team to deliver winning proposals. The company area a global managed services business working with enterprise and public sector clients, across Cloud, End-User Computing, Digital Workplace, Service Desk, and Network Infrastructure. What You’ll Do: Lead Service/ solution design from qualification to contract. Control bid teams — architects, pricing, delivery, and SMEs. Break down RFPs/RFIs into actionable, costed, client-ready solutions. Present internally and to clients at decision-maker level. Run solution workshops, own the architecture, and shape the financial model. You’ll Need: Experience working as a Service architect, Service Manager or Customer Success Manager R Gravitas to lead and drive teams through high-stakes bids. Deep knowledge of managed services delivery and commercial models. Strong technical grasp: Cloud, Security, EUC, Unified Comms, Service Desk, and more. Experience leading deals across onshore, offshore, and hybrid delivery models.
-
- Deal Architect- DACH region
- Germany
- Upto €110,000 plus bonus and benefits
-
Lead Deal Architect with the authority and experience to take control of complex, multi-million-euro outsourcing bids. This role is about leading the solutioning/ Service effort, bringing structure to chaos, and driving the entire bid team to deliver winning proposals. The company is a global managed services business providing solutions to enterprise and public sector clients, across Cloud, End-User Computing, Digital Workplace, Service Desk, and Network Infrastructure. What You’ll Do: Lead the deal from qualification to contract. Control bid teams — architects, pricing, delivery, and SMEs. Break down RFPs/RFIs into actionable, costed, client-ready solutions. Present internally and to clients at decision-maker level. Run solution workshops, own the architecture, and shape the financial model. Be responsible for the service Wrap and ensuring the Service meets clients requirements You’ll Need: A back ground with IT Services Experience in a similar type of role, for example: Deal, Service, or Solution Architect in ICT outsourcing. Gravitas to lead and drive teams through high-stakes bids. Deep knowledge of managed services delivery and commercial models. Strong technical knowledge: Cloud, Security, EUC, Unified Comms, Service Desk, and more. Experience leading deals across onshore, offshore, and hybrid delivery models.
-
- Pre Sales Lead- IT Services
- Germany
- Upto €100,000 plus benefits
-
As the Pre-Sales Lead (Sales Engineer/ Solution Architect) you will drive large-scale ICT managed services and outsourcing deals (from €0.5M to €20M+). You'll work directly with Business Development and clients to design high-impact solutions across Cloud (Azure, IaaS, SaaS, PaaS), EUC, Unified Comms, Security (SIEM, PAM), Networks, and Smart Workplaces. What You’ll Do: Lead the end-to-end pre-sales cycle — from RFI/RFP to contract. Design innovative, client-specific solutions with technical & commercial impact. Present at CxO level and steer proposal strategies & financial models. Collaborate closely with Portfolio, Service Desk, Field, and Digital Workplace teams. Support deal shaping with strong knowledge of ITIL, SIAM, Automation, and cost analysis. What You’ll Bring: Have strong experience in pre-sales or solution architecture. Experience with €M+ managed service deals. Deep technical expertise in modern ICT stack and enterprise IT services. Strong German (C1) and English communication skills. Certifications: ITIL v3/v4 required; SIAM, ISO20000 desirable.