Pragmatic CSO Podcast #15 - Setting the bar

This week we talk about service levels within the context of your security business plan. That's right, this is about setting the bar. Too high and you can't get there and you will be viewed upon as a failure in the executive wing. Too low and you may open yourself up to a breach on your watch. So we are looking for something "just right."

We also need to start thinking about how to quantify some of the stuff we are doing, and now is not the time to look for innovative means of pulling security metrics. We need to take some data the powers that be are already used to and then set some achievable service levels. Remember, this is about building credibility, not showing how cool you are.

Running time: 6:50 Intro music is Jungle and the exit music is "Elevation" from U2.