{"id":8211,"date":"2023-05-04T11:35:38","date_gmt":"2023-05-04T11:35:38","guid":{"rendered":"https:\/\/www.lafosse.com\/?p=8211"},"modified":"2025-07-18T15:41:17","modified_gmt":"2025-07-18T15:41:17","slug":"cisos-the-canaries-in-the-coalmines","status":"publish","type":"post","link":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/","title":{"rendered":"CISOs: The canaries in the coalmines"},"content":{"rendered":"<p>At our latest CISOs Anonymous event, we welcomed <a href=\"https:\/\/www.linkedin.com\/in\/daniel-cuthbert0x\/\" target=\"_blank\" rel=\"noopener\">Daniel Cuthbert<\/a> to discuss his Black Hat 2022 keynote and his views on current innovation within the industry. With a career spanning over 20 years on both the offensive and defensive side, Daniel has seen rapid evolution across the security sector. Alongside some of the UK\u2019s leading CISOs, we explored key challenges and approaches as complex security demands continue to develop, which we\u2019ve collated here.<\/p>\n<p>&nbsp;<\/p>\n<h2 class=\"Paragraph SCXW240483064 BCX0\" lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\"><b>What does good look like?<\/b><\/h2>\n<p class=\"Paragraph SCXW240483064 BCX0\" align=\"left\">The challenge with regulation is that risk is an abstract concept, and\u00a0measuring securities is difficult to quantify. Regularly reporting on the number of phishing emails and HackerOne submissions your business receives is a\u00a0common set of metrics but presents a very narrow field of \u2018impact\u2019.<\/p>\n<p align=\"left\">Turning to other industries that generally do a better job of security, regulation, and legislation,\u00a0such as pharma, can reveal standards to model against. The reality is that risk will never be at zero, and it takes less than 1% of your organisation to compromise security. Embed those quick wins: get rid of default passwords, use two-factor authentication, and ensure updates are regularly installed.<\/p>\n<p align=\"left\">Breaches are becoming a normal occurrence, but information is rarely shared between companies. Sharing could reveal patterns in attacks, resulting in standardised tools to combat common issues. Unless we can begin to\u00a0understand these breaches as a collective, they will continue to happen.<\/p>\n<p>\u200b<\/p>\n<h2 class=\"Paragraph SCXW240483064 BCX0\" lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\"><b>Legislation as a kitemark<\/b><\/h2>\n<p class=\"Paragraph SCXW240483064 BCX0\" align=\"left\">Consistency is vital as we look to\u00a0the future of information security; creating standardised legislation that spans the industry ensures uniformity regardless of organisation size, with\u00a0no room for justification if requirements are not met.<\/p>\n<p align=\"left\">Financial penalties should be the norm. For companies unable to meet these requirements, substantial fines should be issued, giving vendors a specific incentive to do better. Those who do satisfy regulations would be identifiable by a kitemark, which can be utilised for marketing purposes, business and talent attraction, and recognition within the industry.<\/p>\n<p align=\"left\">Proof of vendor security measures should also be standardised: are all pipelines meeting requirements, are they using modern SaaS tools, and are people within the supply chain actively thinking about security? Vendors who are open,\u00a0transparent, and happy to have the conversation are obviously proactive and confident in their own procedures.<\/p>\n<p>\u200b<\/p>\n<h2 class=\"Paragraph SCXW240483064 BCX0\" lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\"><b>Ultimate control<\/b><\/h2>\n<p class=\"Paragraph SCXW240483064 BCX0\" lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\">Security and innovation are often viewed as opposite sides of the same coin; new technology introduces unknown elements, and development is regularly\u00a0slowed down by security testing phases. An accepted level of risk, and therefore loss of control, must be permitted to allow for innovation.<\/p>\n<p lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\">The role of a CISO is not to make every\u00a0element secure, it&#8217;s to make businesses generally safer. CISOs are the canaries in the coalmines; they can write and verify their own secure code, but the opportunity\u00a0to impact external risks is rare. With so many uncontrollable elements, flagging hazards and possible areas of exposure is\u00a0often the only response.<\/p>\n<p lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\">The prediction for the future of security software is that it will feature interactive elements \u2013 think ChatGPT \u2013 with the ability to review code, identify and understand malware, and provide actionable advice for specific incidents. As an additional tool used alongside current approaches, it suggests a level of speed and responsiveness that can help CISOs and their teams to cast a wider net, and therefore have more control.<\/p>\n<h2 class=\"Paragraph SCXW240483064 BCX0\" lang=\"EN-GB\" xml:lang=\"EN-GB\" align=\"left\"><b>Speak with our expert consultants<\/b><\/h2>\n<p>\u200bTo find out more about La Fosse, attend a CISO Anonymous event, or learn more about the total talent solutions we offer, contact one of our expert consultants:\u200b<br \/>\n<\/p>\n<div style=\"display: none;\">\n<p><a target=\"_blank\" rel=\"noopener\"><b>Brian Hinojosa<\/b><\/a><b>\u00a0&#8211;\u00a0<\/b>Principal Consultant Manager in InfoSec<\/p>\n<p><a target=\"_blank\" rel=\"noopener\"><b>Ross Tanner<\/b><\/a><b>\u00a0&#8211;\u00a0<\/b>Senior Manager in Infosec and Architecture\u200b<\/p>\n<p><a target=\"_blank\" rel=\"noopener\"><b>Stephanie Crates<\/b><\/a>-Principal Consultant in InfoSec<\/p>\n<\/div>\n<p>\u200b<\/p>\n","protected":false},"excerpt":{"rendered":"<p>At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry. With a career spanning over 20 years on both the offensive and defensive side, Daniel has seen rapid evolution across the security sector. Alongside some of the UK\u2019s leading<\/p>\n","protected":false},"author":9,"featured_media":54176,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[690,673],"tags":[],"class_list":["post-8211","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insights-hiring","category-leadership"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CISOs: The canaries in the coalmines - La Fosse<\/title>\n<meta name=\"description\" content=\"At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CISOs: The canaries in the coalmines - La Fosse\" \/>\n<meta property=\"og:description\" content=\"At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\" \/>\n<meta property=\"og:site_name\" content=\"La Fosse\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-04T11:35:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-18T15:41:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min-1024x683.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"683\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Sam Fisher\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sam Fisher\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\/\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"Sam Fisher\",\n\t                \"@id\": \"https:\/\/www.lafosse.com\/#\/schema\/person\/899bafeb394af39b8447d1791469684f\"\n\t            },\n\t            \"headline\": \"CISOs: The canaries in the coalmines\",\n\t            \"datePublished\": \"2023-05-04T11:35:38+00:00\",\n\t            \"dateModified\": \"2025-07-18T15:41:17+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\"\n\t            },\n\t            \"wordCount\": 617,\n\t            \"image\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png\",\n\t            \"articleSection\": [\n\t                \"Hiring Insights\",\n\t                \"Leadership\"\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\",\n\t            \"url\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\",\n\t            \"name\": \"CISOs: The canaries in the coalmines - La Fosse\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png\",\n\t            \"datePublished\": \"2023-05-04T11:35:38+00:00\",\n\t            \"dateModified\": \"2025-07-18T15:41:17+00:00\",\n\t            \"author\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/#\/schema\/person\/899bafeb394af39b8447d1791469684f\"\n\t            },\n\t            \"description\": \"At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage\",\n\t            \"url\": \"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png\",\n\t            \"contentUrl\": \"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png\",\n\t            \"width\": 6000,\n\t            \"height\": 4000,\n\t            \"caption\": \"CISOs anonymous event\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\/\/www.lafosse.com\/\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"CISOs: The canaries in the coalmines\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\/\/www.lafosse.com\/#website\",\n\t            \"url\": \"https:\/\/www.lafosse.com\/\",\n\t            \"name\": \"La Fosse\",\n\t            \"description\": \"Recruitment, Leadership, &amp; Talent Solutions\u00a0Across Tech,\u00a0Digital, &amp;\u00a0Change\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\/\/www.lafosse.com\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\/\/www.lafosse.com\/#\/schema\/person\/899bafeb394af39b8447d1791469684f\",\n\t            \"name\": \"Sam Fisher\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\/\/www.lafosse.com\/#\/schema\/person\/image\/\",\n\t                \"url\": \"https:\/\/secure.gravatar.com\/avatar\/91ac2ce076a9943ec2f116f4267e4d56cc990d26e0b086dba677c7aeda00a810?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\/\/secure.gravatar.com\/avatar\/91ac2ce076a9943ec2f116f4267e4d56cc990d26e0b086dba677c7aeda00a810?s=96&d=mm&r=g\",\n\t                \"caption\": \"Sam Fisher\"\n\t            },\n\t            \"url\": \"https:\/\/www.lafosse.com\/insights\/author\/samfisher\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CISOs: The canaries in the coalmines - La Fosse","description":"At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/","og_locale":"en_US","og_type":"article","og_title":"CISOs: The canaries in the coalmines - La Fosse","og_description":"At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry.","og_url":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/","og_site_name":"La Fosse","article_published_time":"2023-05-04T11:35:38+00:00","article_modified_time":"2025-07-18T15:41:17+00:00","og_image":[{"width":1024,"height":683,"url":"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min-1024x683.png","type":"image\/png"}],"author":"Sam Fisher","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sam Fisher","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#article","isPartOf":{"@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/"},"author":{"name":"Sam Fisher","@id":"https:\/\/www.lafosse.com\/#\/schema\/person\/899bafeb394af39b8447d1791469684f"},"headline":"CISOs: The canaries in the coalmines","datePublished":"2023-05-04T11:35:38+00:00","dateModified":"2025-07-18T15:41:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/"},"wordCount":617,"image":{"@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png","articleSection":["Hiring Insights","Leadership"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/","url":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/","name":"CISOs: The canaries in the coalmines - La Fosse","isPartOf":{"@id":"https:\/\/www.lafosse.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage"},"image":{"@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png","datePublished":"2023-05-04T11:35:38+00:00","dateModified":"2025-07-18T15:41:17+00:00","author":{"@id":"https:\/\/www.lafosse.com\/#\/schema\/person\/899bafeb394af39b8447d1791469684f"},"description":"At our latest CISOs Anonymous event, we welcomed Daniel Cuthbert to discuss his Black Hat 2022 keynote and his views on current innovation within the industry.","breadcrumb":{"@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#primaryimage","url":"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png","contentUrl":"https:\/\/www.lafosse.com\/wp-content\/uploads\/2024\/05\/Ciso-pic-2-min.png","width":6000,"height":4000,"caption":"CISOs anonymous event"},{"@type":"BreadcrumbList","@id":"https:\/\/www.lafosse.com\/insights\/cisos-the-canaries-in-the-coalmines\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.lafosse.com\/"},{"@type":"ListItem","position":2,"name":"CISOs: The canaries in the coalmines"}]},{"@type":"WebSite","@id":"https:\/\/www.lafosse.com\/#website","url":"https:\/\/www.lafosse.com\/","name":"La Fosse","description":"Recruitment, Leadership, &amp; Talent Solutions\u00a0Across Tech,\u00a0Digital, &amp;\u00a0Change","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lafosse.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.lafosse.com\/#\/schema\/person\/899bafeb394af39b8447d1791469684f","name":"Sam Fisher","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lafosse.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/91ac2ce076a9943ec2f116f4267e4d56cc990d26e0b086dba677c7aeda00a810?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/91ac2ce076a9943ec2f116f4267e4d56cc990d26e0b086dba677c7aeda00a810?s=96&d=mm&r=g","caption":"Sam Fisher"},"url":"https:\/\/www.lafosse.com\/insights\/author\/samfisher\/"}]}},"_links":{"self":[{"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/posts\/8211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/comments?post=8211"}],"version-history":[{"count":0,"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/posts\/8211\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/media\/54176"}],"wp:attachment":[{"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/media?parent=8211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/categories?post=8211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lafosse.com\/wp-json\/wp\/v2\/tags?post=8211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}