이 에피소드에 관해
Robert Former spent years losing the risk argument, until he found a way to say it in the language executives speak, dollars. As Chief Information Security Officer at Acquia, he uses the FAIR methodology to turn security risk into one number the business can weigh against its appetite.
He talks with Matt Peters about the two paths into the CISO seat, why compliance is an outcome of security and not its driver, and how radical transparency built a team that followed him through three companies. Accepting risk, he argues, is the business's decision, never his.
Topics discussed:
- Turning security risk into a dollar figure with FAIR
- Why compliance is an outcome of security, not a driver
- Two paths to the CISO chair, technical and business
- Leading every function only after doing it yourself
- Building trust through radical transparency and demonstrable honesty
- Making risk acceptance the business's decision, not security's
- Navigating the shared security responsibility model in PaaS
- From security orthodoxy to weighing the upside of risk
Listen to more episodes:
