How has the role of a system security manager changed in the past decade?

2 Emerging threats and vulnerabilities

Another factor that has changed the role of a system security manager is the emergence of new threats and vulnerabilities that exploit the weaknesses of systems and networks. Cybercriminals, hackers, state-sponsored actors, and insiders are constantly developing and deploying sophisticated and targeted attacks, such as ransomware, phishing, denial-of-service, zero-day exploits, and advanced persistent threats. These attacks can compromise the security, functionality, and performance of systems, as well as cause financial, reputational, and legal damages to the organization. System security managers have to stay updated on the latest threat intelligence, trends, and best practices, as well as implement proactive and reactive measures to prevent, detect, and respond to incidents.

3 Evolving regulations and standards

A third aspect that has influenced the role of a system security manager is the evolution of regulations and standards that govern the security and privacy of information systems and data. Organizations that operate in different sectors, regions, and markets have to comply with various laws, rules, and guidelines, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI DSS), and the ISO 27001 framework. These regulations and standards define the minimum requirements for security policies, procedures, and controls, as well as the obligations for reporting and auditing. System security managers have to ensure that their systems are compliant with the relevant regulations and standards, as well as manage the risks and costs associated with compliance.

4 Increased demand and expectations

A fourth aspect that has affected the role of a system security manager is the increased demand and expectations for security from various stakeholders. As systems become more critical and valuable for the organization, the management, customers, partners, and regulators expect higher levels of security, reliability, and availability. They also expect system security managers to demonstrate their value and performance, as well as communicate effectively and transparently about security issues and solutions. System security managers have to balance the trade-offs between security and usability, as well as justify and optimize their security investments and resources. They also have to develop and maintain their skills, knowledge, and credentials, as well as foster a culture of security awareness and responsibility within the organization.

5 New opportunities and challenges

A fifth aspect that has shaped the role of a system security manager is the emergence of new opportunities and challenges that arise from the innovation and adoption of technology. Some of the technologies that offer new possibilities and benefits for system security managers are artificial intelligence, machine learning, blockchain, biometrics, and quantum computing. These technologies can enhance the capabilities and efficiency of security systems, such as by automating tasks, analyzing data, verifying identities, and encrypting information. However, they also pose new risks and uncertainties, such as by creating new attack vectors, generating ethical dilemmas, and requiring new skills and competencies. System security managers have to embrace and leverage these technologies, as well as anticipate and mitigate their potential impacts.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?