What's Next for the CISO?

This talk asks the question, What’s our end game in information security? Too often information security seems to be on a treadmill, refreshing established security controls (log monitoring, firewalls, antimalware solutions) every few years, while continuously bumping into resource limitations and constraints. While recognizing that aspects of the infosec practitioner will always remain tactical, responding to the real-time challenges of our adversaries, we argue that without a long-term, strategic vision for the end state of security, we run the very real risk of underserving our institutions and communities.

Outcomes: Develop new perspectives on your career that can be put into practice at your home institution * Identify career development opportunities * Understand better ways to advance your mission at your home institution