Security culture thoughts and how best to establish it - SiliconANGLE

As cyber threats become more sophisticated, cultivating a strong security culture has become a fundamental priority for organizations.

Since breaches can have such a devastating impact, security must be at the forefront of every discussion. By building trust and integrating security into daily operations, companies can better protect their assets and strengthen their defenses against evolving cybersecurity challenges, according to Clarke Rodgers (pictured), director of enterprise strategy at Amazon Web Services Inc.

“Trust is very difficult to gain, but very easy to lose. Back when Andy Jassy and team were releasing AWS, they realized, if we don’t do security right and we lose that trust with the customer, we’ll be out of business,” Rodgers said. “Security was drilled in as very, very important from day one of AWS and it continues to be through this day.”

Rodgers spoke with theCUBE Research’s Dave Vellante and Rebecca Knight at Fal.Con, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed AWS’s security-first approach and how AWS aims to integrate security into every layer of the organization. (* Disclosure below.)

Building security culture needs careful thought

What does a good security culture look like? It won’t be anything strange to many on the floor of Fal.Con, according to Rodgers.

“There’s layers of security from a technical perspective. The trickier bit, in my opinion, is really back to that culture of security,” he said. “When the security organization and the ‘business’ come together and realize, security is my strategic enabler. Strong security allows me to innovate faster, delight my customers, release more products to market, outpace my competitor.” 

It’s a myth that the CISO represents “the department of no,” according to Rodgers. Today, things have changed.

“We have our CISOs who are saying, ‘Yes, but.’ We’ll do anything you want, business. We’ll build this. We’ll do that,” he said. “I just need you to understand some of the risks that are out there and the mitigants we need to put in place in order to make things successful.”

Here’s the complete video interview, part of SiliconANGLE’s and theCUBE Research’s coverage of Fal.Con: 

(* Disclosure: Amazon Web Services Inc. sponsored this segment of theCUBE.)

Photo: SiliconANGLE