ISMS Governance

SECO opens its virtual door to our international alumni community, to exchange ideas, evaluate the good, the bad and the ugly, challenge the status quo, and share lessons learned.

This time we welcome Andrea Krush, Senior Manager Cybersecurity & Privacy at Eraneos.

Can't make it on this date? No worries, just register and you will automatically receive a link to the video directly after the event....

Navigating the Shifting Tides of ISMS Governance: Challenges and Solutions

Andrea Krush is Senior Manager Cybersecurity & Privacy at Eraneos, and an author, trainer and mentor for SECO’s CISO 2.0 Cyber Leadership Training Program. Prior to that, she held cyber leadership positions at DAS, the Dutch Railways and Equalit.

During her talk, Andrea will explore the critical issues surrounding ISMS governance, shedding light on the prevailing challenges and evaluating actionable solutions.

ISMS (Information Security Management System) is a framework that provides a systematic approach for managing and continually improving information security in the organization. In an ideal world, ISMS serves as the bedrock of operationalizing an organization's cybersecurity strategy. However, the reality often falls short of this vision, posing profound challenges that must be addressed.

One of the primary challenges lies in the extrinsic nature of ISMS implementation, often driven by external incentives such as ISO certification, compliance requirements, or customer demands. It is essential to understand that ISMS should not merely be a checkbox exercise but an intrinsic driver of robust cybersecurity defense.

Control frameworks, once relatively stable, have become dynamic and ever-changing. Factors like digital innovation, migrations from on-premises to the cloud, evolving threat landscapes, and shifting legislative landscapes continually redefine the security terrain. ISMS must adapt and evolve in tandem, or it risks falling behind and becoming obsolete. One of the main challenges here is the lack of security involvement in projects that have a direct impact on ISMS.

In this webinar, we underscore the pivotal role of ISMS governance as the linchpin holding it all together. Getting it right prevents the three core pillars - risk management, controls, and compliance - standing in isolation and supports the transformation of your ISMS from a theoretical ideal into a robust and responsive framework where you are not just doing the right things, but doing the right things right.

Agenda:

13h00: Welcome -- Wim Stoffelen, SECO-Institute (Netherlands)

13h05: ISMS Governance -- Andrea Krush, Senior Manager Cybersecurity & Privacy at Eraneos (Netherlands)

13h30: Q&A Session

13h50: Closing remarks and next webinars -- Wim Stoffelen