{"id":2471,"date":"2003-11-04T00:00:00","date_gmt":"2003-11-04T00:00:00","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/2003\/11\/04\/ceos-know-nothing-about-security\/"},"modified":"2021-12-30T11:41:24","modified_gmt":"2021-12-30T11:41:24","slug":"ceos-know-nothing-about-security","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/2003\/11\/04\/ceos-know-nothing-about-security\/","title":{"rendered":"&#8216;CEOs know nothing about security&#8217;"},"content":{"rendered":"<p>The fourth European IT security conference opened in Amsterdam yesterday &#8211; with a damning indictment of CEOs who fail to understand the value and the costs of security.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>While cyberterrorism and other fad-threats haven&#8217;t turned out to be pose the risks which many experts had predicted, the number one source of tech threat remains inside a business itself &#8211; its staff and its internal processes, according to Arjen van Zanten of KPMG&#8217;s risk management business.<\/p>\n<p>He claimed there still exists a cultural barrier between IT departments and the board.  &#8220;The board of directors don&#8217;t understand anything about security,&#8221; he said.<\/p>\n<p>Tom Scholtz, VP of research firm Meta Group, replied &#8220;but the heads of IT, and above all those in charge of security, aren&#8217;t up to the job of reassuring them&#8221;, in the course of a roundtable on the value of security.<\/p>\n<p>Just a few years ago, IT security was considered a restriction on businesses.  Like putting the brakes on a vehicle only has one result: it slows down how fast you can go.  Today, luckily, it&#8217;s considered as a sign of confidence and people realise that using the brakes actually helps you go to faster.<\/p>\n<p>More info: [url=http:\/\/www.silicon.com\/software\/security\/0,39024655,39116753,00.htm]http:\/\/www.silicon.com\/software\/security\/0,39024655,39116753,00.htm[\/url]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[],"class_list":["post-2471","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/2471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=2471"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/2471\/revisions"}],"predecessor-version":[{"id":4958,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/2471\/revisions\/4958"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=2471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=2471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=2471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}