For me, the most enjoyable part of working in CyberSecurity and Technology in general, is the constant challenge and the feeling of accomplishment, when a challenge is met or a project is finished.

Read More Comments

400 views4 Comments

If you have regular meetings with your CEO, how do you make the most of this one-on-one time? (And if you DON'T meet regularly with your CEO, how do you build/maintain sufficient influence to ensure security concerns get enough visibility?)

People & Leadership Security & GRC Internal CXO Relationships

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)3 months ago

I wanted to share some insights from my experience regarding risk-taking in business. While it's important to be bold and take calculated risks, balancing those risks with the practicalities of running a business is equally ...read more

Read More Comments

368 views4 Comments

When considering a new CISO role, what are your red flags and green flags? (For instance, what signs do you look for to indicate the organization values the security function/your role in the business?)

People & Leadership Security & GRC Security Strategy & Roadmap

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)4 months ago

One of the ways to check whether an organisation values the security function is to see where in the organisation the CISO role sits and whom the CISO reports in to. A red flag would be if the role reports into the Head of ...read more

Read More Comments

410 views7 Comments

As security leaders we develop security and awareness training surrounding phishing; however, we are told we can only expect to get down to a 3% click rate. 3% is not low enough and I am looking for ideas on how to drive down the click rate to 1% or less. Has anyone had great success with a technique they have used to drive down the click rate?

Security & GRC

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)8 months ago

1 Reply

Read More Comments

4.9k views13 Comments

Any advice for leaders who are looking to adopt DevSecOps but getting resistance from the org or dev teams? How can you overcome that pushback?

Security & GRC Secure Code & Automation (DevSecOps)Security Strategy & Roadmap+1 more

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)8 months ago

Share the horror stories about leaked data and lost business and reputation, how much it may cost. Present risks to the management. The leaders then should make this cause shared by their subordinates, dev and org teams. ...read more

Read More Comments

5.8k views8 Comments

How are you planning to improve your cyber asset management? Are you looking to add new tools for this purpose, focusing on process changes or targeting something else entirely?

Asset Management Security Strategy & Roadmap Security & GRC

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)9 months ago

Hi there, happy new year!

If you are looking for actual assets:

I would love to further integrate our physical asset management tool with our ITSM and network asset discovery tools to get a much better view ...read more

Read More Comments

1.6k views2 Comments

What challenges or concerns are you facing in 2024 that may negatively impact and jeopardize your or your company's 2024 objectives?

Security & GRC Strategy & Architecture

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)9 months ago

Businesses are enacting budget cuts, exhibiting increased caution in their approach to technology spending. This cautious stance is impacting the ability to finalize deals for Software as a Service (SaaS), as individuals ...read more

Read More Comments

3.4k views2 Comments

If you’ve implemented SIEM, what solution are you using?

Security & GRC Threat Intelligence & Incident Response Security Operations Center (SOC)+1 more

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)9 months ago

Last year I started implementing Wazuh (based on Elastic stack). I was effective, with both M365 technologies and AWS. Also have the advantage that the agent is running on Windows, MacOS and Linux. If you play a litlle bit ...read more

Read More Comments

4.2k views6 Comments

Have you ever personally conducted workshops/activities for security awareness training with your own board members? What was most effective? What would you do differently today?

Awareness & Training Security Strategy & Roadmap Board Engagement

Glen ArmesCISO at Old Republic International Corporation in Insurance (except health)a year ago

Drafted some general information for the Board, which was presented up by the exec. In my experience the written form doesn't always land. We did recently attend an event where a CEO talked through his personal experience ...read more

Read More Comments

5.4k views5 Comments

Engagement Stats

32
Answers Written

5.4K
Profile Views

11
Upvotes Received