Which of Gartner’s 2019 Top 7 Security and Risk Management Trends Are Impacting Your Business?

Rasha M. Abu AlSaud, SVP - Chief Information Security Officer from a leading Saudi Bank talked at the Gartner Security and Risk Management Summit 2018 in Dubai, highlighting how the organization aligned its information security strategy and business priorities.

Rasha explained how she gained a seat at the boardroom table. She then mapped business objectives to the security program using the business objective of customer trust as an example, requires secure digital services. Customer satisfaction requires high availability of services, more digitization requires new diverse applications to protect and more compliance regulations demand more adherence to them. If you want to learn more, you can find the blog writes up here: “How a Leading Saudi Bank matured security to better partner the business”

Everyone talks about aligning security with the business but this is easier said than done as many security experts come from a firewall & endpoint protection background.

Our article “SIEM: The Steps Before "The First Steps" doesn’t only focus on risk appetite statements, but also on how to pragmatically get the overall business aligned with security goals. Moreover, we describe in detail how alignment can be achieved through a security steering committee and what its responsibilities are. Therefore creating a pragmatic risk appetite statement could potentially turn into a great task to put on the agenda of that security steering committee.

There are many partners in our ecosystem, providing management consulting and strategy design for information security risks - such as are Accenture, Deloitte or Booz Allen Hamilton.