↳
You have to impress upon people the urgency of protecting the information. I can't change the culture, culture change comes from executives. Less
↳
Most organizations can rationalize the basic need for security. Usually, if there is a cultural barrier it is because there has been high transactional cost in the past. If Security is seen as a barrier to staff doing their work, they will resist, and mightily. If you're trying to reset the culture, first ask about the experience of the staff and how they think about the workflow, the functionality of the IT system. With their feedback in mind, you can start to understand how to remove those blocks and develop influence over the culture. Less
↳
Given the interview was for a Deputy CISO position, I was focused on the security-related answer behind this question. After I was clearly not on the right track answering this question, the interviewer shared that "performance" was the answer he was looking for. I admit I should have known the answer here, but this caught me off guard given the role I was applying for. Less