CIOs and CSOs don't always see eye to eye. That, at least, was the message last week in Chicago at The Security Standard conference. Geir Ramleth, senior vice president and CIO at Bechtel and Andy Ellis, senior director of information security and chief security architect with Akamai, took the stage to discuss priorities of the two disciplines: as it turns out, they do not always match up. Ellis contends that CIOs should be more forthcoming with their technology plans and should consult CSOs in advance. Security professionals shouldn't be put in the position of always having to retrofit security, he said. Meanwhile, Ramleth said that security professionals are not always open to suggestions from IT. "Security people have this phrase, 'yes, but…'" he said, explaining that the phrase generally translates as: "I agree with you, but I don't agree with you, and therefore I'm going to mess you up," he said. Fixing the problem has a lot to do with communication, both execs agree. Having more information about the business drivers behind technology decisions would help CSOs understand strategic priorities.
For more information:
- see the article [1] in NetworkWorld
Links:
[1] http://www.networkworld.com/news/2007/091207-security-standard-cio-cso.html