OUR BLOG

According to the latest research by PricewaterhouseCoopers, more than a third of the surveyed Board members of leading companies and CEOs are unsure of the capacity of internal IT security resources and their ability to timely define and clearly point out security issues in preserving vital digital data. This is one of the indicators for a special topic: how much and what are the capacities of IT secutity teams to adequately report on potential threats. Distribution of logs or simple SIEM analytics is not an acceptable way of communication to the management structures of companies.

 

Two factors are critical: the ability and resources of the IT security team to monitor and anticipate problems, as well as the capacity of the management of these teams to later, vertically, inform company management about security levels, planned activities, trends and budgeting next steps.

 

Unfortunately, practice shows that the implementation of new solutions actually overwhelms IT security teams, that there is a lack of human capacity, and especially a lack of well-educated and experienced leaders of such teams (CISO or similar) who would have a strong technical background and complementary business capacity , sufficient to recompose hundreds of technical findings and information into, according to senior management, useful business information. As one of the latest solutions, the so-called vCISO, or virtual CISO, therefore, outsourced capacity, which companies begin to hire, "buying" such a service from leading cyber security service providers.

 

In this way, companies solve at least two important tasks: they have a permanent expert on IT security technical operations and at the same time a reliable and competent "translator" of complex system data into practical, clear parameters when deciding on a company's business.

 

What is vCISO?

 

Virtual CISO, or "CISO-as-a-Service", is a cybersecurity expert who uses his extensive experience in various industries to help organizations develop an adequate information security program and manage its implementation. vCISO has a strategic role and cooperates with the management and the existing technical team.

He is able to present the state of the security system to the organization's board of directors, executive team, auditors and regulatory bodies.

 

Some of the activities performed by vCISO include:

 

1. Regulatory compliance and risk management;

2. Information security program for your industry;

3. Business continuity and disaster recovery;

4. Information security policy and procedures;

5. Operational security services.

 

 

Sky Express provides vCISO services, for more information, contact us at podrska@sky-express.rs.

 

 

Recent Posts