Steve Gentry: Why CISOs Need to Drop the Chicken Little Mentality & Focus on Being Business Leaders

With all the potential threats to your organization, it’s easy to fall victim to the Chicken Little mentality. But expounding “the sky is falling” only drives you further from your security goals. That’s why seasoned Chief Information Security Officer Steve Gentry believes security leaders must be business leaders first. In this episode, Steve explains this philosophy, the importance of data over opinions, and how to drive efficiency across your organization with SaaS.Key Takeaways:[00:00 - 01:47] Introduction to Steve Gentry, CISO at Clari, and many-time founder[01:58 - 04:23] How Steve got started in security at an IS service desk[04:25 - 08:24] What's required to be a good CISO beyond the standard job description? Discussing Steve's business savvy.[08:26 - 13:35] Why data is greater than opinion and how it helps Steve support more strategic operations[13:41 - 18:16] Steve's go-to data sources and tools, and the role of data to a company[18:16 - 22:38] Driving business alignment with executives using data[22:38 - 25:43] Building a foundation for success with data, and recognizing growth with operational efficiencies[26:43 - 31:10] Agility, and why Steve's gone all in on SaaS management tools instead of running off manual tracking and spreadsheets[31:17 - 34:22] Third party risk management, why is it so strategic to most businesses?[34:22 - 38:28] Staying on top of the entirety of risk management, security. How great vendors and other resources simplify the process[38:29 - 41:03] A focus on diligence, leveraging insights and automations in SaaS management[41:01 - 44:22] Should CISOs report directly to a company's CEO?[44:22 - 46:12] Mentorship and what future CISOs need to do to prepare for the next step in their career[46:17 - 49:23] Rapid fire questions and closing