CISOs Share Lessons for Building Security Programs at Hypergrowth Companies
Summary
Security leaders discuss how fast-growing companies can prioritize security, partner with business teams, distribute accountability, and set measurable goals while balancing security with growth.
Key points
- Security leaders should first understand the business, its growth plans, and customer needs to identify where security can help and where it may slow progress.
- Early-stage teams can prioritize standards and investments according to available capacity and business needs.
- Giving product and engineering teams a role in security decisions can help integrate security early in product development.
- Leaders recommend equipping business partners with the information, tools, and processes to make sound security decisions autonomously.
- A federated approach can distribute security accountability across the business while the security team enables and supports teams.
- In hypergrowth environments, teams should align on the highest-impact security risks and set longer-term objectives to track progress beyond firefighting.
Article Details
- Topic
- Security program prioritization and organizational practices for rapidly growing businesses
People
David CookCISO at Sequoia Consulting and formerly at Databricks; discusses partnering with go-to-market teams when security budgets are limited.Omer SingerHead of Cybersecurity Strategy at Snowflake; discusses decision-making, security culture, and setting measurable objectives.Quincy CastroCISO at Redis; discusses building a security program and focusing on business-critical security issues.Ryan KazanciyanCISO at Wiz; discusses security partnerships, prioritization, and managing trade-offs in hypergrowth businesses.