CISO Tips for Shaping Your Security Strategy

Security leaders at high-growth startups and major enterprises alike are asking themselves, “How do I level up my program this year?” Economic uncertainty, a global pandemic, and rising customer expectations make this question even more complex. Join Ray Espinoza, Chief Information Security Officer at pentesting company Cobalt, as he draws upon years of experience managing infosec programs at eBay, Workday, Amazon, and Cisco as well as working with heads of security at both large and small businesses. Ray will draw upon his time spent “in the trenches” to tackle common CISO pain points around program planning and execution. Specific topics which he will explore include the following: -How the concept of “security maturity” differs for companies of varying size -- and how to measure progress. -The characteristics and practices that define more mature security teams. -Professional blunders that yield tangible learnings, and strategies for avoiding common pitfalls (including basic breach prevention). -The advent of pentesting 2.0, and how it fits more neatly into agile development lifecycles.