In this week's episode Dr. Crane speaks to Joe Robinson about why he thinks CISOs should report to the CIO, and design considerations for organizational structure. The discussion covers topics such as who is responsible for vulnerability management and building trust as a CISO.

Joe is the founder and CEO of High Peaks Solutions, a cybersecurity venture focused on helping clients develop real insights and enhance their security programs to prepare for the ever-growing number of cybersecurity threats.

He also previously was the executive vice president and director of information, technology, and operations for Fifth Third Bank where he led the information technology, cybersecurity, data management, and bank operations divisions.

In this episode:

00:00 — Intro

02:03 — Should The CISO Be Under The CIO

03:21 — The First And Second Line

04:29 — The Role Of CISO In The First And Second Lines

05:56 — Organization Of Security Leaders Along Lines

07:29 — What Works And What Doesn't When Organizing Along First And Second Lines

09:16 — Ownership Of Responsibilities And Resources

10:58 — Communication And Relationships Between CISOs and Technology Teams

13:21 — Reporting To A Board Of Directors

15:30 — Building A Program For Reporting To The Board

16:26 — What Works In Building Trust As A CISO

18:27 — Common Mistakes In Building Trust And Relationships

19:17 — Getting From "No" To "Yes And Here's How"

21:28 — Sign Off

Joe Robinson:

High Peaks Solutions — https://highpeakssolutions.com/

Thanks To Our Sponsors:

Heinz College CISO Certificate — https://www.heinz.cmu.edu/programs/executive-education/chief-information-security-officer-certificate

CISOWise vCISO — https://www.cisowise.com/

Heinz College:

https://www.facebook.com/heinzcollege

https://www.linkedin.com/school/carnegie-mellon-university---h.-john-heinz-iii-college/

Carnegie Mellon:

https://www.linkedin.com/school/carnegie-mellon-university

https://www.facebook.com/carnegiemellonu

Follow CISOWise on all podcast apps.

Website — https://www.cisowise.com/podcast

Show Notes & Transcript — https://www.cisowise.com/podcast/003-the-view-from-the-cio-with-joe-robinson