What's Happening?
Jonathan Monk, CIO at the Institute of Cancer Research, has implemented a novel approach to cybersecurity that involves active engagement from executives. At the Gartner Security & Risk Management Summit, Monk discussed how protection level agreements
(PLAs) are used to quantify risk and manage cybersecurity controls. This approach allows executives to make informed decisions about security investments, balancing cost and friction with improved security measures. The strategy includes transparent discussions with executives, enabling them to vote on security scenarios and understand the implications of their choices.
Why It's Important?
Monk's approach to cybersecurity is crucial for protecting sensitive medical research data while ensuring transparency and data sharing. As cyber threats become more sophisticated, involving executives in cybersecurity decisions helps organizations maintain resilience and business continuity. The use of PLAs provides a structured framework for evaluating security measures, allowing for informed decision-making and investment in necessary protections. This strategy not only safeguards valuable research data but also supports the advancement of scientific research by facilitating secure data sharing.
Beyond the Headlines
The implementation of PLAs and executive engagement in cybersecurity reflects a broader trend towards integrating security into business operations. By quantifying risk and involving non-specialists in security decisions, organizations can create a culture of cybersecurity awareness and responsibility. This approach may lead to more effective security measures and improved collaboration between IT and executive teams. Additionally, the focus on transparency and data sharing highlights the importance of balancing security with scientific progress, ensuring that research can continue to advance while remaining protected.
