When your CEO asks, "Are we secure?" what do you say?

Conference2015San Francisco | April 20-24 | Moscone Center

When your CEO asks,“Are we secure?” what do you say?

“As secure as we can be.”

- Chris Egaaen, Sycomp

Watch the #RSAC video: bit.ly/how-secure

If your CEO asks, “How secure are we?” what do you say?

“We could be more secure if you give me more money.”

- Jennifer Graham SunTrust Banks, Inc.



“We’re only as secure as the things we know about.”

- Jay Schwitzgebel HealthPlan Services



“According to our audits we’re doing a good job.”

- Steven Lodin, Sallie Mae Bank



“I think we’re pretty secure but it’s always a moving target.”

- Rhonda Simmon, New York Life



“As good as it gets, my friend. You’re never as secure as you can be. It’s about risk management.”

- Tony Zirnoon, Global Security Strategy



“Very secure, but we’re only one incident away from a problem as is every other company.”

- Christina Critzer, SunTrust Banks, Inc.



“The hackers are just as good as we are, and we’re constantly fighting. We have to be right 100% of the time. They have to be right one.”

- David Rooker, Actian Corporation



“We are as secure as we can be today. We are continuing to mature, and we'll be more secure tomorrow.”

- John Graham, Jabil



“I’d first ask what are our goals? How do we define being secure? How do we define what we are going to measure?”

- Bill Olson, Tenable Network Security



“We have a number of threat vectors that we watch, and we have made a number of investments on those.”

- Alex Hu�on, IANS



“The key thing we do is we go and look at benchmarks and see how we compare on it. So, probably not secure enough, but trying to get there.”

- Kenneth Haertling, Telus



“We are aiming for ‘secure enough.’ Not ‘too secure’ because that means you are spending money you don't need to spend, and ‘not secure enough’ means you get owned.”

- David Mortman, Dell



“Today we’re about medium. Medium means right now we don't have any active attacks, and we're monitoring the situation.”

- Greg Press, Munich Re



“Based on industry practices, we've done the best that we can. Using something like SecurityCenter makes it easy to say you've done best practices recommended by the government, by the payment card industry, by penetration testers, and the really, really basic cyber hygiene things.”

- Ron Gula, Tenable Network Security



Data & Analytics

When your CEO asks, "Are we secure?" what do you say?