How should cybersecurity leaders change their risk management approach?

Wendy Wu

Software Engineer · Microsoft

Adopt a unified approach

Wendy Wu says you cannot keep humans and agents in separate worlds and must manage them in a unified approach, since you cannot secure a human without knowing what its agents are doing, or protect an agent without knowing the human owner's role.

JA

James J Azar

Chief Information Security Officer · Artera Services

Emphasize speed and automation

James J Azar says cybersecurity leaders should emphasize speed and automation, arguing that hour-based detection may fail if a stolen credential can become admin control in under three hours, and that defensive automation is needed.

Sam Curry

Chief Information Security Officer, SVP · Zscaler

Be business‑first

Sam Curry says cybersecurity leaders should be business-first in all things, since business is about acceptable risk for acceptable return, and he notes CISOs and security personnel must remind themselves they are business people and risk managers first.

The answer starts at 11:33.

Dr. Justin Ubert

Division Chief (Component CISO) · U.S. Department Of Transportation

Be agile

Dr. Justin Ubert says cybersecurity leaders should stop being calcified and treating the risk management framework as a checklist, and instead be agile, responsive to business needs, and partner with the mission.

Joshua Aaron

CEO · Aiden Technologies, Inc.

Prioritize rapid patching

Joshua Aaron says cybersecurity leaders should prioritize rapid patching because vulnerabilities are discovered faster now, and quick updates reduce the attack surface and limit the blast radius of exploits.