In this week's episode Dr. Crane speaks with Mark Morrison about understanding and communicating with business units when implementing a security program, and managing a workforce in the face of shortages.

Mark is the senior vice president and chief security officer at the Options Clearing Corporation. Previously, Mark was the chief information security officer with State Street Bank. Mark has had a long and distinguished career in the Defense Department and intelligence community serving in multiple cybersecurity leadership roles.

In this episode:

01:32 — Introductions

01:36 — What Works In Driving Security Initiatives?

03:08 — Successes In Resiliency And Being Proactive

04:12 — Organizations Falling Behind On Being Proactive

04:50 — Challenges In Understanding Critical Business Processes And Elements

07:03 — Determining Return On Investment Of Security

08:08 — Communication With Business Units When Implementing New Controls?

08:41 — Overreach In Security Affecting Business Processes

10:13 — Resiliency And Planning For Attacks

13:00 — Cybersecurity Workforce Shortage

15:10 — How Do You Ensure Your Cybersecurity Program Is Adequately Staffed?

16:32 — Successes In Cybersecurity Drawing Workforce From Military

17:42 — Sign Off

Mark Morrison:

The OCC — https://www.theocc.com/Company-Information/Executives/Mark-Morrison

Links in this episode:

US Cyber Command — https://www.cybercom.mil/

The SEI — https://sei.cmu.edu/

Thanks To Our Sponsors:

Heinz College CISO Certificate — https://www.heinz.cmu.edu/programs/executive-education/chief-information-security-officer-certificate

CISOWise vCISO — https://www.cisowise.com/

Heinz College:

https://www.facebook.com/heinzcollege

https://www.linkedin.com/school/carnegie-mellon-university---h.-john-heinz-iii-college/

Carnegie Mellon:

https://www.linkedin.com/school/carnegie-mellon-university

https://www.facebook.com/carnegiemellonu

Follow CISOWise on all podcast apps.

Website — https://www.cisowise.com/podcast

Show Notes & Transcript — https://www.cisowise.com/podcast/002-establishing-your-cyber-program-with-mark-morrison