PodChats for FutureCISO: CISO as security champion and partner to business

The chief information security officer is the head of all information security operations within a company. He or she is tasked with determining the overall direction of the infosec resources under his/her domain, how the resources will be apportioned within the various disciplines, managing all the people in his/her department, and interacting with all other departments in the organisation. Often the face of an organisation’s infosec operations, the CISO is expected to interact with outside actors, including regulators, policymakers, and law enforcement agencies.As organisations become more digitally native, the CISO's role need to evolve from tactical to strategic, from being a pure technologist to one that of a business enabler first.In this PodChats for FutureCISO, we are joined by Yvette Lejins, resident CISO, APJ, Proofpoint, for her take on evolving cyber threats and how cybersecurity is responding to these changes. 1.       Proofpoint has just released its 2022 Voice of the CISO report. a.       What is the purpose of the report?b.       The 2022 Voice of the CISO report is the second such report. What's different from the first report published in 2021?c.        What would you say are the top 3 lessons/insights you can draw from it? (use as intro for the rest of the interview)2.       Every major security vendor publishes security reports. A common theme of these reports are ever increasing cyberthreats. Specific to the current environment that we are – the uncertainties that hang over us as a result of the pandemic, does remote work make organisations more vulnerable to attacks? Why? 3.       Since the start of the pandemic, we've noted an increase in the use of VPNs purportedly to mitigate against risks of attackers using remote workers to attack the enterprise. How has this worked so far?4.       In addition to VPNs, can you name a few other measures organisations have implemented to protect against cyber threats?5.       Beyond increasing employee security awareness and preparedness enough, what more can be done to improve cybersecurity posture?6.       Give three tips for the CISO to become more effective as (a) business partner; (b) champion of security for the organisation?