By Amy Danise, Editor
It means that it’s time for a shift in mindset.
Much like when the role of the CISO needed to change when software as a service (SaaS) applications started being procured by business units, it needs to adapt again. Before, the CISO’s organization used to be responsible for every single application purchase. But when business units started procuring applications, the role of the CISO changed to one of governance of those applications instead. Now, CISOs need to move beyond governance and help facilitate communication between their organizations and the engineering teams that are building modern applications.
It’s up to the CISO to help teams find the right balance between mitigating risk and accelerating time to deployment—not the easiest of tasks.
Thankfully, developers are aware of the importance of data privacy and security. The report also found that, according to IT decision-makers and developers, the second-biggest challenge organizations face in expanding its use of cloud-native and open-source tools over the next 12 months is ensuring security. While this shared focus is positive, if IT decision-makers and developers are not aligned on ownership of security and compliance responsibilities, that can be problematic.
