2023 CISO Trends: Beyond Business, It's Personal
Top 8 CISO flavours 2023 - Shamane Tan

2023 CISO Trends: Beyond Business, It's Personal

Last year, I did an infographic on my top 10 CISO flavours 2022, featuring key topics frequently discussed by cyber leaders. Continuing this tradition, I've consolidated an overview of the key areas CISOs focused on in 2023.

Many of you know me for my keynotes at conferences and participation in industry panels. In addition to these, I also conduct forums and roundtables with hundreds of CISOs and cyber leaders, as well as deliver board and executive awareness workshops.

This year, I have been seeing a broad spectrum of different business demands, new challenges within our evolving operational landscape, and at the same time, the remarkable adaptability and passion of our cyber defenders. A quote that I always share at my keynotes rings so true, "Our cyber security agenda should extend beyond organisational mandates; it's vital to understand the human dimension and recognise its individual impact. It's not business, it's personal."

It's not business, it's personal.

With increasing awareness of burnout and well-being, it's crucial for our leaders to constantly prioritise and re-prioritise their goals.

Here are my top 8 CISO flavours for the year 2023, and in no particular order:

  • the CISO as a strategic role,
  • cyber security metrics and tying it back to the business,
  • effective board-level communication and reporting,
  • cyber security operations,
  • supply chain risk management,
  • cyber team dynamics,
  • regulatory compliance and trends, and
  • gen AI (no surprises there).

Top 8 CISO flavours in 2023 by Shamane Tan

Any other observations?

Interestingly, our cyber leaders have a great sense of humor, and they love Legos! Who would have thought my AI creation of a cyber Lego series would take off so well?

What trends have you noticed in your cyber journey this year? I'd love to hear your thoughts. Wishing everyone happy holidays!

Cyber Lego Series

About the Author

Shamane Tan?is the Chief Growth Officer at Sekuro, a leading global cyber resiliency company and the best-selling co-author of 'Cyber Mayday & the Day After'. Her new book has been recently featured in the Forbes special Summer coverage of "What business leaders are reading": 'Building a Cyber Resilient Business', a cyber handbook tailored for executives and boards consumption. She is also the author of 'Cyber Risk Leaders', one of her earlier works.

Shamane's publications

Shamane has worked with exciting start-ups all the way to global organisations extensively?in Australia and within the Asia-Pacific region. She advises the C-Suite on their business?security posture to the reality of the challenges they faced from regulatory issues and?cyber crime. She is also the founder of the Cyber Risk Meetup which is in six major cities across Australia, Singapore, Japan and Philippines. Her meetups offer security and risk professionals and enthusiasts a unique platform to impart?and exchange innovative insights.

Peter Lake

Strategic Cyber Leader | MCybSecurity ECowan | vCISO | AIPIO | Cyber & CTF Coach | ASD Business Partner | Discoverer: Asteroid (551900) Laneways

1 å¹´

Love it Shamane, great summary. One that’s not there (not that I have seen a lot of them) but a lot of the regulators, the Minister and peak bodies are saying Tabletops and Exercises need to be done! While might have flown under the radar a bit this year ….. as I have been saying all week - PLENTY MORE IN 24!?????

Shamane Tan Thank you for sharing your great insights. In addition, the industry is also focusing on PQC (Post Quantum Cryptography) / QRE (Quantum Resistant Encryption). NIST will be standardizing some of these algorithms which will be released early 2024. (https://www.nist.gov/news-events/news/2023/08/nist-standardize-encryption-algorithms-can-resist-attack-quantum-computers) NIST have also released the NIST CSF (Cyber Security Framework) 2.0. NIST CSF was created on 2014 and was last updated in 2018. With the latest draft, it will include a new function (Govern) to the existing 5 functions ( Identify | Protect | Detect | Respond | Recover). GOVERN (GV): Establish and monitor the organization’s cybersecurity risk management strategy, expectations, and policy. The NIST CSF 2.0 is also expected to be released in 2024. (https://www.nist.gov/cyberframework/updating-nist-cybersecurity-framework-journey-csf-20) Thank you for your services and insights to the community. Looking forward to see all the great things you will bring us in 2024.

要查看或添加评论,请登录

Shamane Tan的更多文章

  • AI Utopia 2030?

    AI Utopia 2030?

    Would this even be possible? A future where AI amplifies the best of human intentions and safeguards against the worst.…

    3 条评论
  • Conversations with an Undercover Spy

    Conversations with an Undercover Spy

    ?? Have you ever wondered what it's like being a spy while watching espionage TV series and movies? I had the…

    1 条评论
  • Harnessing the Synergy of Minds: Uniting 100+ CISOs for Collective Growth

    Harnessing the Synergy of Minds: Uniting 100+ CISOs for Collective Growth

    Today, I wanted to share with you the incredible journey of the Chief Information Security Officer (CISO) community…

    2 条评论
  • Building a Cyber Resilient Business Via the C-Suite Lens

    Building a Cyber Resilient Business Via the C-Suite Lens

    As our world becomes increasingly digital, cyber threats are on the rise and pose a significant risk to businesses of…

    3 条评论
  • Book Featured in Forbes Australia - Building a Cyber Resilient Business

    Book Featured in Forbes Australia - Building a Cyber Resilient Business

    I'm beyond ecstatic to find out that one of my many-years-in-the-making dream of mine just came to life. My heart…

    50 条评论
  • Top 10 CISO flavours this 2022

    Top 10 CISO flavours this 2022

    My first shot at making an infographic is a recap of what I consider as key CISO highlights for 2022. Let me know what…

    26 条评论
  • Part V: Fireside Chats with the Board

    Part V: Fireside Chats with the Board

    So you find yourself in the boardroom, now what? In my 90 minutes conversation with a Board Director, due to the…

    11 条评论
  • Part IV: The CISO's Strategy

    Part IV: The CISO's Strategy

    How many of you have often wondered how does the CISO come up with their cyber security strategy, and how does it…

    5 条评论
  • Cyber Risk Leaders Readers

    Cyber Risk Leaders Readers

    2019 has been an incredible year of many personal milestones. How can I forget the many talented Cyber Risk leaders…

    22 条评论
  • Part III: The View of Cyber Risk in the Retail Industry?

    Part III: The View of Cyber Risk in the Retail Industry?

    "The retail industry doesn’t like spending too much especially in #cybersecurity." I heard someone said this a while…

    2 条评论

社区洞察

其他会员也浏览了