CIO Straight Talk - Issue 10 - 8

One serious problem they describe is a persistent
skills shortage. This is driving CISO's and others
responsible for cybersecurity to increasingly
look for help in the form of automated tools and
improved data analysis. Another problem facing
many organizations is that business leaders
continue to think of cyber-risk in terms of internal
network penetration, specific technologies, and
defensive measures.
Our panelists made clear that cybersecurity
requires a broader view, a more comprehensive
and proactive strategy that includes all digital
assets and all the points of enterprise contact
and access that have shifted from the physical
to the virtual. In their organizations, they said, top
management has recognized the importance of
cybersecurity and the potential impact of cyber
incidents on reputation, trust, and the bottom line.
To spread that message, our panelists are
increasing their investment in educating
employees throughout the enterprise about
cybersecurity and risk choices. In response to the
skills shortage, they are working to cultivate and
motivate cyber professionals. They are collecting and
analyzing more data to support a more proactive
cybersecurity posture. And they have redefined the
role of the CISO as the executive in charge of linking
business strategy to digital risk management.

"MORe OF eVeRYTHIng"
With more than 150 years of cybersecurity, IT,
and business experience among them, these
cybersecurity practitioners have seen a lot.
But the attacks continue to come with greater
frequency, intensity, and business impact.
"We've encountered more targeted attacks
that are more social in nature," says Paul Reyes.
Through social networks and other means,
hackers are gathering data and harvesting
credentials of Visra Energy's employees, using
the information to target specific groups.
There is another new type of threat, very
different in nature. "The game has changed with

8

our Panel
Paul Reyes
Vice President and CISO of Infrastructure
Services at Vistra Energy, the largest
retailer and generator of electricity in Texas
Berit Børset
Senior Vice President and CISO at DNB,
Norway's largest financial services group
Zeeshan Sheikh
Vice President and CIO at U.S. electric
power producer and retail distributor
Entergy Corporation, where he is
responsible, among other IT functions,
for cybersecurity
John Graham
CISO at Jabil, a provider of advanced
manufacturing solutions to technology
and electronics companies worldwide
Andy Ellis
CSO at Akamai, a global leader in content
delivery network services
Steve Martino
Vice President and CISO at global
networking giant Cisco Systems
Roland Cloutier
Senior Vice President and CSO at ADP,
which provides business outsourcing
solutions to clients worldwide
Joe Kirk
CIO at the Tennessee Department of
Transportation, whose responsibilities
include cybersecurity
CIO Straight Talk - Issue 10

Table of Contents for the Digital Edition of CIO Straight Talk - Issue 10
