[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-202638-105":59,"doc-detail-202638-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","effective-ciso-leadership-doing-the-right-things-right-pan-aslan-american-business-council-2018","Effective CISO Leadership - Doing the Right things Right - Pan Aslan American Business Council 2018","","Effective CISO Leadership: Doing the Right things Right addresses cybersecurity leadership priorities by analyzing CISO concerns and breach trends. It highlights expectations for increasing stress, potential budget pressure, and risks such as job loss. The material presents incident patterns by industry and top breach types, then quantifies breach costs relative to averages. It consolidates cost-reduction levers and practical risk-mitigation actions across attack patterns, including incident response, encryption, training, DLP, analytics, BCM involvement, and board-level governance.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/effective-ciso-leadership-doing-the-right-things-right-pan-aslan-american-business-council-2018/202638/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/effective-ciso-leadership-doing-the-right-things-right-pan-aslan-american-business-council-2018/202638.png","ImageObject",300,407,{"name":92,"@type":93},"Clementine","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-25","2026-09-04",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",13,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"What concerns do CISOs report facing in 2018?","Question",{"text":113,"@type":114},"The document summarizes survey findings that many CISOs expect higher likelihood of cyberattacks or data breaches, anticipate more stressful roles, and expect security budgets to decline or stay flat.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"How does the document categorize breach incidents by industry and pattern?",{"text":118,"@type":114},"It provides an “incidents by industry” breakdown alongside “top patterns for breaches,” grouping breach types such as crimeware, cyber-espionage, denial of service, insider and privilege misuse, and web application attacks.",{"name":120,"@type":111,"acceptedAnswer":121},"Which measures are emphasized to reduce data breach costs and minimize risk?",{"text":122,"@type":114},"It recommends evaluating cost changes by addressing process fixes versus the incident, and lists actions spanning incident response teams, encryption, employee training, BCM involvement, threat sharing, security analytics, DLP, data classification, and governance like board-level CISO involvement.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},202638,1788549586,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":140,"language":141,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":67,"update_tm":130,"read_time":145,"preview_page_count":4},1374391974564,"https://ap-avatar.wpscdn.com/avatar/14000253aa45c000a9e?x-image-process=image/resize,m_fixed,w_180,h_180&k=1779874745381141002","Effective CISO Leadership:Doingthe Right things Right  \nTodd Fitzgerald CISM,CISA,CRISC,CGEIT,CiSSP,CIPP/US/EU/CANADA,CIPM,PMPISO27001,ITILv3f  \nManaging Director/CISO &Cybersecurity Leadership AuthorCISO Spotlight,LC Deerfield,1Lwww.cisospotlight.com  \nPresented at Pan Aslan American Busine s Council NoV9,2018 Ch cago,L  \nCISO SPOTLIGHT,LLCTrusted Cybersecurityand Privacy Training  \n67%of CISOs believe their  \norganizations are more likely to fallvictim toia cyber attack or data breach  \nin 2018Ponemon Institute;,“What CISOs Worry About in 2018”  \nResulting In..  \n69%Anticipate Roles Will Be MoreStressful....  \n63%Believe Information Security Budgetsto Decline or Remain Flat...  \n45%Even Fear Job Loss in the Event of A..  \n9家非非郭书多  \n*8书8世  \n书林55林本移5林路5本够s5电态    车55555555s刺m55转特5551555韩5555555率5555=5章5=5串55李5幸5=氧554=幸p45幸5知M3幸幸  \nDATABREACH零常事事事本零事客和p移客本甚8甚88s5本书典                s本58林ss路5客    世本5本5=+★=5率55s 5=  \n# 因     事5事5事本5s\n\nuS⁵5ee5韩韩5串5    55车5车韩5  5整事5幸5515章季===55李车555幸=55辑季韩    FRES PY庭Y      幸  \n# WHAT IS THE QUESTION?\n\nA。11 BILLION  \nB。1.9 BILLION  \nC.500 MILLION  \nD.8,229  \n# INCIDENT PATTERNS BY INDUSTRY AND TOP PATTERNS FORBREACHES\n\n| Incidents by Industry (security events  \u003Cbr>compromising integrity,confidentiality or  \u003Cbr>availability of an information asset)   |  |\n| --- | --- |\n| Accommodation  \u003Cbr>Manufcturing  \u003Cbr>Professional  \u003Cbr>Information  \u003Cbr>Healthcare  \u003Cbr>Financial  \u003Cbr>Education  \u003Cbr>Public  \u003Cbr>Retail  \u003Cbr>Patterns   |  |\n| 2485988  \u003Cbr>294  \u003Cbr>26  \u003Cbr>57  \u003Cbr>154  \u003Cbr>49  \u003Cbr>19  \u003Cbr>21  \u003Cbr>Crimeware   |  |\n| 9  \u003Cbr>1  \u003Cbr>82  \u003Cbr>120  \u003Cbr>41  \u003Cbr>24  \u003Cbr>12  \u003Cbr>4  \u003Cbr>Cyber-Espionage   |  |\n| 104703  \u003Cbr>580  \u003Cbr>1  \u003Cbr>336  \u003Cbr>85  \u003Cbr>74  \u003Cbr>151  \u003Cbr>13  \u003Cbr>Denial of Service   |  |\n| Everything Else   | 12  \u003Cbr>68  \u003Cbr>41  \u003Cbr>39  \u003Cbr>81  \u003Cbr>63  \u003Cbr>59  \u003Cbr>48  \u003Cbr>13   |\n| 37287  \u003Cbr>17  \u003Cbr>3  \u003Cbr>4  \u003Cbr>15  \u003Cbr>96  \u003Cbr>16  \u003Cbr>10  \u003Cbr>Lost/Stolen Assets   |  |\n| 1774  \u003Cbr>2  \u003Cbr>34  \u003Cbr>11  \u003Cbr>30  \u003Cbr>181  \u003Cbr>22  \u003Cbr>16  \u003Cbr>3  \u003Cbr>Miscellaneous Errors   |  |\n| 1  \u003Cbr>1  \u003Cbr>5  \u003Cbr>81  \u003Cbr>49  \u003Cbr>6  \u003Cbr>Pay Card Skimmers   |  |\n| 138  \u003Cbr>5  \u003Cbr>7  \u003Cbr>7  \u003Cbr>28  \u003Cbr>22  \u003Cbr>21  \u003Cbr>1031111  \u003Cbr>Privilege Misuses   |  |\n| 306  \u003Cbr>1  \u003Cbr>2  \u003Cbr>1  \u003Cbr>2  \u003Cbr>11  \u003Cbr>Point of Sale   |  |\n| 3497  \u003Cbr>73  \u003Cbr>17  \u003Cbr>11  \u003Cbr>88  \u003Cbr>277  \u003Cbr>36  \u003Cbr>29  \u003Cbr>Web Applications   |  |\n\nShaded box=Top patterns accounting for breaches byindustry(confirmed disclosure to an unauthorized party)  \n# REDUCING DATA BREACH COSTS\n\nDifference from mean (USS)  \n-20 -15 -10 -5   0   5   10  15  20  25  \nCosts may be decreased orincreased from $141 per capitacost per customer recordEvaluate in terms of fixing theprocess vs the incident  \nIncident Response TeamExtensive use of encryptionEmployee trainingBCM involvementParticipation in threat sharingUse of security analyticsExtensive use of DLPData classification schemaInsurance protectionCISO AppointedBoard-level involvementCPO AppointedProvision of ID protectionConsultants engagedRush to notifyLost or stolen devicesExtensive use of mobile platformsCompliance failuresExtensive cloud migration  \nThird Party involvement16.9  \nCISO SPOTLIGHT,LLC  \nTrusted Cybersecurity  \nand Privacy Training  \n# CISO MUST REVIEW ATTACK PATTERNS OF HOW TO MINIMIZE RISK\n\n\n| ATTACK PATTERN   | ·HOW TO REDUCE RISK   |\n| --- | --- |\n| Crimeware   | ·Software updates,macro-enabled document risk   |\n| Cyber-Espionage   | ·Security Awareness training,phishing exercises   |\n| Denial of Service   | ·Test DDOS mitigation services   |\n| Insider and Privilege Misuse   | ·Limit,log,monitor use,large data transfer and usb awareness   |\n| Miscellaneous Errors   | ·Disposal processes,4-eye policy for publishing information   |\n| Payment Card Skimmers   | ·Train employees,monitor terminals with video,review tapes  \u003Cbr>regularly   |\n| Physical Theft &Loss   | ·Encrypt where possible,corporate policy limiting printing sensitive  \u003Cbr>data   |\n| Web Application Attacks   | ·Promote varying Pass","cbCaiiGdaJ1eOwSa","https://ap.wps.com/l/cbCaiiGdaJ1eOwSa","pdf",1924772,36,"English","# What is the Question?\n# Incident Patterns by Industry and Top Patterns for Breaches\n# Reducing Data Breach Costs\n# CISO Must Review Attack Patterns of How to Minimize Risk","[{\"question\":\"What concerns do CISOs report facing in 2018?\",\"answer\":\"The document summarizes survey findings that many CISOs expect higher likelihood of cyberattacks or data breaches, anticipate more stressful roles, and expect security budgets to decline or stay flat.\"},{\"question\":\"How does the document categorize breach incidents by industry and pattern?\",\"answer\":\"It provides an “incidents by industry” breakdown alongside “top patterns for breaches,” grouping breach types such as crimeware, cyber-espionage, denial of service, insider and privilege misuse, and web application attacks.\"},{\"question\":\"Which measures are emphasized to reduce data breach costs and minimize risk?\",\"answer\":\"It recommends evaluating cost changes by addressing process fixes versus the incident, and lists actions spanning incident response teams, encryption, employee training, BCM involvement, threat sharing, security analytics, DLP, data classification, and governance like board-level CISO involvement.\"}]","Effective CISO Leadership - Doing the Right things Right - Pan Aslan American Business Council 2018 | PDF",91]