Ambassador

Dana Wells

Managing Director at DHWells Consulting, CISO (retired)

United StatesVerified Community Ambassador

Identified Expertise

Content Dana is Following

Please join or sign in to view Dana's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Who does the CIO role in your organization report to?

Team & Organizational Design

Global CIO

CEO

CFO

Board

COO

Other

View Results

3.3k views3 Upvotes1 Comment

Thinking about your organization as a whole, what would you say are its top business objectives for the next two years?

Strategy & Architecture

Growth / market share

Digital business / digital transformation

Profit improvement

Innovation / new products

Customer focus

Corporate M&A

Technology Improvements

Cost Optimization

Operations improvement

View Results

7.5k views4 Upvotes

Do you believe new technologies would offer a bigger return on investment than new employees at your company?

Disruptive & Emerging Technologies Talent Management & Performance

Yes

12.7k views9 Upvotes19 Comments

Who decides how much security risk to take for a specific system?

Security & GRC

Chief Information Security Officer

Chief Information Officer

Chief Risk Officer

Chief Executive Officer

Board

System Owner

Others (Please specify)

View Results

17k views4 Upvotes20 Comments

In this gig economy we live in, which is growing rapidly, how many of you have used talent agencies, for specialized professionals on an as needed basis, to ramp up quickly and get a project done?

Talent Management & Performance Financial Management

Yes, we use external talent agencies often

Yes, we use external talent agencies rarely

No, we only leverage internal staff

Not sure, I see people come and go not sure if they are internal staff or external talent

View Results

15.7k views4 Upvotes4 Comments

Are you worried about quantum computers affecting the security of your software in the future?

Security & GRC Compute

Yes

No, this will never happen

Security technologies will evolve along with Quantum Computing

View Results

11.8k views1 Upvote1 Comment

How do we get to know simple answers to most easiest doubts. Anything that is instant and most accurate ?

Mentor or Teacher

Online Assistant

Most probable person with years of experience

Go with your own idea (my preference )

View Results

3.3k views

How concerned are you about effects of an attack on your supply chain?

Security & GRC Threat & Vulnerability Management

Very concerned

Somewhat concerned

Not concerned

View Results

4.5k views1 Upvote2 Comments

Are cybersecurity regulations going towards a Sarbanes Oxley model?

Security & GRC Regulatory Compliance

Yes

Unsure

View Results

2.9k views3 Comments

How often do you access GPI?

Peer Insights

Every day!

Every couple of days

Once a week

Every couple of weeks

View Results

4.3k views

CrowdStrike outage: Any quick advice for orgs affected? What immediate actions are your IT and other teams taking to mitigate the effects of the outage?

Crowdstrike Outage 2024 IT Strategy & Roadmap Crisis Management+2 more

Dana WellsManaging Director at DHWells Consulting, CISO (retired) in IT Services2 months ago

Right now, communication is key!

We have invoked a passphrase protocol to protect our users from social engineering attempts to gain unauthorised access to our users computers or systems by claiming to be from IT support ...read more

Read More Comments

7.2k views20 Upvotes33 Comments

How are you evaluating your organization's Information Security maturity level and how are you setting the goal post?

Security & GRC

Dana WellsManaging Director at DHWells Consulting, CISO (retired) in IT Servicesa year ago

In my opinion NIST provides the best framework for a comprehensive view of information security maturity. I has broad adoption in other infosec frameworks used across most industries. I've used it with good success. As ...read more

Read More Comments

1.3k views1 Upvote4 Comments

We have a BYOD policy and we need to amend our policy to include banned mobile apps due to security/privacy concerns, i.e. TikTok. Has anyone found a trustworthy and maintained list of apps your company should ban from mobile devices that access your information systems due to privacy and security concerns?

Mobile Devices End-User Devices Security+1 more

Dana WellsManaging Director at DHWells Consulting, CISO (retired) in IT Services2 years ago

It’s hard to create a universal list, as there are so many variables between companies.

On the more aggressive end, a regulated financial services firm will pretty much prohibit almost everything. A public relations ...read more

Read More Comments

2.8k views2 Upvotes12 Comments

Scare someone in IT using 5 words.

Crisis Management

Dana WellsManaging Director at DHWells Consulting, CISO (retired) in IT Services4 years ago

All the backups are corrupted.

5 1 Reply

Read More Comments

8k views5 Upvotes52 Comments

Engagement Stats

9
Answers Written

4.3K
Profile Views

10
Upvotes Received