Ambassador

Arturo Navarro

CISO at Navarro-Bores

SpainVerified Community Ambassador

Identified Expertise

Content Arturo is Following

Please join or sign in to view Arturo's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you practice empathetic leadership?

People & Leadership Culture & Values

Yes

I try to, but not sure I am executing well

No, I pursue other leadership principles/frameworks

View Results

2k views2 Upvotes2 Comments

Which SASE vendors are you currently assessing?

Cloud Network Infrastructure

Cato

Cisco

Cloudflare

Forcepoint

Fortinet

Open Systems

Palo Alto Networks

Versa

VMWare

ZScaler

None of these

View Results

1.9k views

Has your business been subject to any payment fraud attacks (successful or otherwise) in the last 12 months?

Yes

1.3k views

Have you taken any of the following actions to ensure your remote workers have reliable and secure internet access?

People & Leadership Security & GRC Team & Organizational Design+15 more

Supplied a company router

Reimbursed employees for their own router purchase

Upgraded or introduced a VPN

We’ve provided work-from-home benefits but nothing specific to securing internet access

Other

View Results

2.3k views1 Upvote

Has your company made you feel comfortable about the prospect of returning to the office?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+8 more

Yes - My company has been clear with the back to office plan

No - Messaging around return to the office has been confusing and disjointed

1.2k views2 Upvotes2 Comments

What is the most effective frequency for 1-on-1 meetings with direct reports?

People & Leadership Strategy & Architecture Cloud+15 more

Once a week

Once every 2 weeks

Once a month

Adhoc

What 1-on-1?

View Results

13.1k views12 Upvotes25 Comments

Are you planning to improve endpoint security in the next 12 months with any of these additional capabilities?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+8 more

Patch management: to reduce attack surface and avoid system misconfigurations

Malware and ransomware prevention: to protect endpoints from social engineering attacks

Malware and fileless malware detection and response: to protect against malicious software

Threat Hunting: to detect unknown threats that are acting or dormant in your environment and have bypassed the security controls

Not planning to change endpoint security strategy

View Results

828 views

Has your organization enabled employees to access Office 365 from mobile endpoints?

Device Management Mobile Productivity Tools+15 more

Yes

Other

View Results

2.5k views2 Upvotes

Do you use a central monitoring system for all security alerts?

Threat Intelligence & Incident Response Third Party Risk Management (TPRM)Threat & Vulnerability Management

Yes

No, but we are considering implementing one.

Unsure

View Results

2.7k views

Among which age group of frontline workers do you find the highest churn rates at your organization?

Culture & Values Mentoring & Coaching Talent Management & Performance

18 – 25 (Gen Z)

26 – 41 (Millennials)

42 – 57 (Gen X)

58 – 67 (Baby Boomers)

View Results

2.1k views1 Upvote1 Comment

How does the unique approach of the Digital Operational Resilience Act (DORA) to regulatory compliance, particularly its omission of a mandated security management system unlike the NIS Directive, align with the regulator's intent according to your experience? The law firm suggests that compliance with DORA negates the need for NIS compliance and that roles like "Control Function" could replace traditional roles like CISO. What are your thoughts on this interpretation?

Security

Arturo NavarroCISO at Navarro-Bores in Banking4 months ago

Are there any examples of DORA compliance publicly available yet?

279 views1 Comment

When it comes to your RBAC system, how do you manage scalability and performance as your organization grows?

People & Leadership Identity & Access Management (IAM)Scalability+1 more

Arturo NavarroCISO at Navarro-Bores in Bankinga month ago

To manage scalability and performance in an RBAC system it is recommended to use hierarchical roles and automated assignments. Assuming the implementation is based on cloud infrastructure, effective adoption of scalable ...read more

Read More Comments

871 views2 Comments

What role-based access control (RBAC) best practices are most important when it comes to periodic reviews and updates for roles/permissions?

Identity & Access Management (IAM)Process Management Risk Management

Arturo NavarroCISO at Navarro-Bores in Bankinga month ago

Someone posted similar question here. Refer https://www.gartner.com/peer-community/post/we-looking-at-implementing-role-based-access-controls-some-our-saas-platforms-due-to-entry-emerging-markets-anyone-have-best

Read More Comments

1.8k views4 Comments

What do you do when a business unit's priorities conflict with security requirements? How do you find a balance that allows you to reduce information security risk while still supporting those business goals?

Risk Management Governance, Risk & Compliance Security Strategy & Roadmap

Arturo NavarroCISO at Navarro-Bores in Banking2 months ago

It is all about establishing the security business goals based on requirements - it is very hard for a business to explicitly define a goal to "not meet security, audit or regulatory requirements".

Read More Comments

420 views3 Comments