Sam Curry, CISO at Cybereason, explains why company culture is not to blame for leadership issues, and how to create a better work climate.
Culture is a word that conjures many things: ancient history, sweeping architecture, exotic customs, esoteric linguistics and deep, bitter conflict. However, it is far too often used to explain communications problems, management issues or operational problems in either a flippant way or as an excuse for inaction and failure.
The root cause for such issues is almost never culture but is rather the result of not utilising data, looking for the real problems or addressing what can be addressed in a corporate setting. This is true when we look at the lack of alignment of the rank-and-file and of the leadership between security departments and the rest of the company. Nowhere is this more evident than in the most isolated of departments: the security operations centre. The seeming impossibility of climbing the security operations cultural mountain, let alone bridging it with other departments’ mountains, can, in fact, be made far simpler and more tractable than most of us know, and it starts with a deeper dive into culture....