Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising. Learn More

Services
Capture
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

twi-managed-portal-color
Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

twi-briefcase-color-svg
Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

tw-laptop-data
Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

twi-database-color-svg
Database Security

Prevent unauthorized access and exceed compliance requirements.

twi-email-color-svg
Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

tw-officer
Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

tw-network
Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats

5 Highly Effective Habits of Security-Minded CEOs

More than ever, CEOs and other corporate executives are keeping a close watch on the risks posed by digital threats and cyberattacks.

According to PwC's Annual Global CEO Survey (PDF) released earlier this year, 61 percent of respondents said they are "somewhat" or "extremely" concerned about cyber threats - a rise of 13 percent from 2014. In the United States alone, 86 percent of CEOs felt this way. The survey also concluded that three-quarters of CEOs in America view cybersecurity as strategically "very important" to their organization. Our 2015 Security Pressures Report backs this up, with 61 percent of more than 1,000 security professional respondents feeling the most "people pressure" coming from their owners, boards and C-level executives.

Yet despite this growing awareness, there remains a noticeable chasm between the security obligations of the board room versus the server room.

If you run a business, you are familiar with the frequency by which data breaches have occurred and how crushing they can be to an organization's fiscal health - from reputational harm to compliance fallout to customer attrition. But you may not be fully versed in what role you play in ensuring the message of security is prioritized across your company.

To help you implement strong corporate governance around data protection - and ensure your infosec team feels the corner-office love - we've compiled a list of the five essential habits of a security-conscious CEO:

  1. You unite: The risk posed by cyber is no different than any other risk facing a business, and it's much bigger than just an IT issue. CEOs who care about security and risk management endorse a certain culture by championing communication and collaboration from the top down - and even vertically across partners. But you also recognize the need for security education from the bottom up, considering many of today's most devastating security breaches are perpetrated by first tricking employees into clicking on something they shouldn't, thus inviting in malware. (Of course, you yourself can be a phishing target too).

  2. You see the bigger picture: Similar to the first point, security now transcends any one person or department within an organization. A security shortfall or lack of preparedness in one area of the business could send the company into a nosedive if it is trying to prevent or respond to a compromise. Security buy-in must come from everyone, and you're the person who can best make that happen. 

  3. You are realistic: As demanding as chief executives must be around ingraining security into the company culture, you also must be empathetic to the cause. Guaranteed security is not achievable, and even the most mature organizations still experience incidents. With businesses having to be right 100 percent of the time, dedicated attackers will find a way to get in. As CEO, you should not expect perfection, but instead rally around your IT and security staff, and inspire the company to place itself in the best possible position to avoid a costly breach.

  4. You are visionary: The most effective CEO won't sit idly by and solely rely on a quarterly visit from the security group. Instead you regularly consume news and are in constant contact with security leaders. That means you have the pulse on the latest threats and grasp that cybersecurity is a business risk - not just a point-in-time compliance exercise. It's also about detection, prevention - and response, in light of the increasing likelihood a breach does occur. 

  5. You recognize the value of outside help: While the PwC survey pointed to a significantly rising understanding of cyber risk, it also found that 73 percent of CEOs globally - and 78 percent in the United states - are concerned about having adequate skills on hand to meet their key threats. With cyber being one of those, forward-thinking CEOs will turn to trusted partners, such as managed security service providers, to help amplify protection in areas where the on-premises know-how is lacking.

Dan Kaplan is manager of online content at Trustwave and a former IT security reporter and editor.

Latest Trustwave Blogs

Trustwave Named a Representative Vendor in 2024 Gartner® Market Guide for Co-Managed Security Monitoring Services

Trustwave has been named a Representative Vendor in Gartner just released the 2024 Market Guide for Co-Managed Security Monitoring Services. Gartner estimates that there are more than 500 vendors who...

Read More

Navigating Security Risks and Innovations in the Hospitality Industry

As technology has become available, the hospitality industry has focused on making the most out of innovations such as contactless services and eco-friendly practices.

Read More

Frost & Sullivan: Trustwave MDR Growth Will Exceed Industry Average

The security analyst firm Frost & Sullivan positioned Trustwave as a leader and top innovator in its research on the MDR market landscape, noting its innovative, industry-leading cloud-native Fusion...

Read More