))
From Cost Center to Business Driver: Making Security a Strategic Asset
Manage episode 447649620 series 3603368
Content provided by Robert Wood and Sidekick Security. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Robert Wood and Sidekick Security or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
In this conversation, Robert Wood, CEO of Sidekick Security, interviews Tyler Healy, CISO of DigitalOcean, discussing the evolution of security leadership, the importance of security as an enabler for business growth, and the dynamics of building a security team. They explore the challenges of engaging with customers, fostering internal relationships, and the balance between security and usability. Tyler shares insights on incident management, materiality assessments, and the significance of understanding how a business makes money to effectively align security initiatives with organizational goals.
Takeaways
- Security teams must engage with customers regularly.
- Understanding business incentives is crucial for security leaders.
- Security should be seen as an enabler, not a cost center.
- Building relationships across departments enhances security effectiveness.
- Product security should empower developers with the right tools.
- Usability is key to successful security implementations.
- Incident management processes must include materiality assessments.
- Availability impacts must be considered in security discussions.
- Third-party risks need to be managed proactively.
- Security leaders should balance technical skills with effective communication.
Chapters
00:00 Introduction to Security Leadership
06:02 Navigating Security as an Enabler
09:56 Building a Security Team from the Ground Up
15:54 Engaging with Customers and Stakeholders
20:00 Fostering Internal Relationships for Security
24:03 Product Security and Developer Enablement
29:59 Balancing Security and Usability
36:03 Incident Management and Materiality Assessment
42:04 The Role of Availability in Security
48:01 Third-Party Risk Management
53:51 Transforming Security into a Business Enabler
4 episodes
Share
