Brian Bobo's guest appearances

Brian Bobo

ITSPmagazine

ONE2ONE Summit Podcast Series

Redefining CyberSecurity

infoseclive

Julie Smith

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Caleb Barlow

Brian Kelly

OwlTail

We keep hearing the mantra that CISOs and CSOs need to be business leaders. So how come we keep seeing job descriptions and hearing about interviews that focus on the technical certifications like the CISSP and many others? That's exactly the question posed in a post on LinkedIn that caught our attention - and that of many others! Join us for a candid conversation with the post's author, a current CIO and CISO, Brian Bobo, as we explore the realities of what a CISO should be focused on and why relying on a technical security certification could turn the business looking in the wrong direction and leaving their risk profile in a bad way. From The LinkedIn PostI don’t post much but I need to go on a bit of a rant. I earned my CISSP years ago. As I am updating my CPEs to stay current I realize that almost nothing I do as a CISO counts for CPEs, I don’t even see a place to document incident management. And what does count can only really be categorized under the Security and Risk Management domain. Presenting, educating, serving on ISC(2) boards are all well and good but they still don’t make me a better CISO. There is nothing about strategy, leadership, presenting to a board, incident management, etc. As a CISO, strategy and leadership should be your focus. You should hire then allow and enable great people to do their jobs. So we need to STOP requiring Directors and above to have a CISSP and start thinking about these as leadership positions with a security focus. ____________________________ GuestBrian BoboOn LinkedIn | https://www.linkedin.com/in/brianbobo/ ____________________________ Resources LinkedIn thread that inspired this conversation: https://www.linkedin.com/posts/brianbobo_stop-requiring-cisos-to-have-a-cissp-i-don-activity-6841017539837997056-HGwu/ ____________________________ This Episode’s Sponsors Imperva: https://itspm.ag/imperva277117988 HITRUST: https://itspm.ag/itsphitweb ____________________________ To see and hear more Redefining Security content on ITSPmagazine, visit:https://www.itspmagazine.com/redefining-security Are you interested in sponsoring an ITSPmagazine Channel?👉 https://www.itspmagazine.com/podcast-series-sponsorships

We keep hearing the mantra that CISOs and CSOs need to be business leaders. So how come we keep seeing job descriptions and hearing about interviews that focus on the technical certifications like the CISSP and many others? That's exactly the question posed in a post on LinkedIn that caught our attention - and that of many others! Join us for a candid conversation with the post's author, a current CIO and CISO, Brian Bobo, as we explore the realities of what a CISO should be focused on and why relying on a technical security certification could turn the business looking in the wrong direction and leaving their risk profile in a bad way. From The LinkedIn Post I don’t post much but I need to go on a bit of a rant. I earned my CISSP years ago. As I am updating my CPEs to stay current I realize that almost nothing I do as a CISO counts for CPEs, I don’t even see a place to document incident management. And what does count can only really be categorized under the Security and Risk Management domain. Presenting, educating, serving on ISC(2) boards are all well and good but they still don’t make me a better CISO. There is nothing about strategy, leadership, presenting to a board, incident management, etc. As a CISO, strategy and leadership should be your focus. You should hire then allow and enable great people to do their jobs. So we need to STOP requiring Directors and above to have a CISSP and start thinking about these as leadership positions with a security focus. ____________________________ Guest Brian Bobo On LinkedIn | <a href="https://www.linkedin.com/in/brianbobo/" rel="nofollow" target="_blank">https://www.linkedin.com/in/brianbobo/</a> ____________________________ Resources LinkedIn thread that inspired this conversation: <a href="https://www.linkedin.com/posts/brianbobo_stop-requiring-cisos-to-have-a-cissp-i-don-activity-6841017539837997056-HGwu/" rel="nofollow" target="_blank">https://www.linkedin.com/posts/brianbobo_stop-requiring-cisos-to-have-a-cissp-i-don-activity-6841017539837997056-HGwu/</a> ____________________________ This Episode’s Sponsors Imperva: <a href="https://itspm.ag/imperva277117988" rel="nofollow" target="_blank">https://itspm.ag/imperva277117988</a> HITRUST: <a href="https://itspm.ag/itsphitweb" rel="nofollow" target="_blank">https://itspm.ag/itsphitweb</a> ____________________________ To see and hear more Redefining Security content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/redefining-security" rel="nofollow" target="_blank">https://www.itspmagazine.com/redefining-security</a> Are you interested in sponsoring an ITSPmagazine Channel? 👉 <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Should We STOP Requiring CISOs To Have A CISSP? Let’s Talk About It | Redefining Security With Brian Bobo