by Douglas Ferguson | Sep 12, 2021 | Articles, Blog
The CISO job isn’t to protect the entire business from all threats for any budget. It’s to spell out what level of protection executives can expect for a given budget. Most modern security programs are centered around “maturity” toward...
by Douglas Ferguson | Jul 10, 2021 | Articles, Blog
COMPLIANCE IS OFTEN IN THE WAY OF WHAT WE ACTUALLY WANT AND UNDERMINES PROTECTION OF WHAT MATTERS MOST. Why do so many security experts lament when their leadership choose a compliance first security strategy? Because they know from experience that evidence of...
by Douglas Ferguson | May 1, 2021 | Articles, Blog
How many times have we heard a CISO say: “I don’t have enough money for security”. But, what is the right amount of money for security? How is it determined? Who makes that decision? The cost, and budget challenges, of a security program is a fascinating study. We...
by Douglas Ferguson | Mar 6, 2021 | Articles, Blog
WHAT IS THE DIFFERENCE BETWEEN SECURITY AND PROTECTION? At Pharos, we often point out that “evidence of security is not proof of protection”. What do we mean? The BIG GAP between security and business leadership It’s no secret that CISO’s and security programs often...
