Home
Graham Gillies

G

Ambassador

Graham Gillies

CIO at MenHealth/MyUroflow

United StatesVerified Community Ambassador

Identified Expertise

People & Leadership13
Engineering10
Process Management10
Relationship Management10
Applications & Platforms9

Engagement Stats

76
Answers Written

6.5K
Profile Views

56
Upvotes Received

Content Graham is Following

Please join or sign in to view Graham's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

What is the best alternative to S3?

Microsoft

Google

SAP

other

View Results

11.1k views7 Upvotes5 Comments

Is your organization intending to invest in AI projects in 2024?

AI & Machine Learning

Yes

No

Discretionary Budget

View Results

5k views5 Upvotes1 Comment

Which browser do you use at work?

Applications & Platforms

Internet Explorer

Microsoft Edge

Google Chrome

Mozilla Firefox

Safari

Brave

Other

View Results

13.5k views3 Upvotes7 Comments

Office 365 or Google suite for global business? If you moved from one to the other, what were some of the reasons? What worked out well or not so well?

End-User Services & Collaboration Applications & Platforms

Office 365

Google Business Suite

15.3k views14 Upvotes36 Comments

How's the usage of engineering ladder in your teams?

Engineering Team & Organizational Design

We have it and people are engaged

We have it but people don't engage

We don't have it but are considering it

We don't have it and are not considering it

View Results

3.5k views3 Upvotes1 Comment

Who is responsible for OT security standards?

Engineering

IT

Joint IT (driver) with Engineering

Joint Engineering (driver) with IT

View Results

5.4k views3 Upvotes2 Comments

SIEM Vendors - Have you used or evaluated?

Exabeam

Alienvault

Sophos

LinkAmerica

Splunk

Other

View Results

6k views4 Upvotes31 Comments

How large is your department?

Team & Organizational Design

< 5 individuals

6-10 individuals

11-20 individuals

> 20 individuals

View Results

4.4k views

How diverse is your department's leadership team?

People & Leadership Culture & Values

Not at all

Quite diverse

Very diverse

View Results

2.6k views

You work for a financial institution and are currently a custodian for digital assets (or think about doing so) . What is the most important to you between security, ease of use, asset fluidity or crypto coverage?

Security & GRC Blockchain

Asset Fluidity

Security at all cost

Cryptocurrency coverage

Ease of use

Other

View Results

2.8k views2 Comments

Have any of you in the CISO or CIO position, found a good way/app/tool that helps aggregate the many multiple streams of information we all get on a daily basis? I'm specifically talking about the numerous reports that I have to sift through to get an adequate view of what the daily threat landscape looks like in our environment. We are using Netsparker, Splunk, Carbon Black, and quite a few more tools that produce good, actionable data, but I am still required to aggregate all that data and sift through it. I'd like a "single pane" type of dashboard where I can quickly scan and have critical issues presented to me. Any and all suggestions are welcome.

Management Tools Threat & Vulnerability Management

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)2 years ago

Have you consider building a BI dashboard that will feed from multiple sources and be single view for you? We are using Qlik but there are other solutions as well that can aggregate various information. It will not be in ...read more

2

Read More Comments

783 views1 Upvote2 Comments

What is your "hot take" for IT in 2024?

Process Management Personal Development IT Strategy & Roadmap

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)9 months ago

Building a story around what zero-trust is and what solutions are used to achieve zero-trust security goals. Then, educate the organization to bring awareness.

2 1 Reply

Read More Comments

53.2k views5 Upvotes33 Comments

How do you evaluate overall Product Security risk in a software company? Do you use $$$, percentages, Risk levels (L,M,H). Do you reciprocate risk with the estimated effort required to reduce it? If yes, do you use $$$, effort days, or similar?

Cloud Applications & Platforms Disruptive & Emerging Technologies+5 more

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

We always lead with risk levels and potential regulatory issues that could arise due to product security issues, followed by $$$$ exposure.

We are HIPAA and GDPR heavy, in terms of regulatory compliance, and we have ...read more

Read More Comments

3.5k views2 Comments

Share your best advice/learning in creating win-win situations with vendors/service providers?

Relationship Management Partnerships

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

Always have at least three vendors in your pocket, who can do the same job/service for you. Use each of them as a sanity check to make sure you are getting competitive pricing and features/services. If the one you're ...read more

3 1 Reply

2.7k views2 Comments

For those of you working at Healthtech companies, what Engineering/IT services are highest priority?

Process Management

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

Cloud security, Cloud performance, regulatory compliance, API security, endpoint security, protection of PHI at all levels (we encrypt EVERYTHING, end-to end, at rest, in use and in motion.)

With HIPAA and GDPR at ...read more

2

Read More Comments

334 views10 Upvotes2 Comments

What would constitute a benchmark or a suitable budget allocation for cybersecurity insurance?

Security & GRC Strategy & Architecture

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

This is quite a broad question, and the answers will be very diverse.

First, what industry are you in? Next, what is your regulatory requirement burden, and what are the consequences for breaches and disclosure of ...read more

1

Read More Comments

631 views1 Upvote3 Comments

Are you experiencing this? WSJ says that non-tech companies are having difficulties recruiting laid-off software developers, engineers, and data scientists from Big Tech.

Process Management Talent Sourcing & Hiring

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

It's understandable since Big Tech culture and projects tend to be more innovative. Also, Big Tech salaries, benefits and professional development opportunities are often more generous for similar roles, so expectations ...read more

Read More Comments

1.4k views2 Comments

IT vendor management: What's your No. 1 tips for avoiding lock-in?

Vendor Management Vendor/Product Assessment

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

I always develop my exit strategy while I am developing my on-boarding project to bring the vendor in. If you’re a long term employee you always have the mindset for several moves forward. We rarely kept a vendor over 5 ...read more

2

Read More Comments

5k views10 Comments

There is a new cyber domain/niche that is trying to change how we do inline cyber security, called Enterprise Browser or Browser Isolation; there are many vendors in the space that are in the way compete with traditional SWG and ZTNA, and I am wondering what do you think on the space. What are some pros and cons, and is there a need for education on the topic?

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

I have always maintained that our Browsers are the number one way for end-users and their devices to get infected/infested with Malware, Spyware, Ransomware, etc, and that we need a completely different approach to browsing ...read more

Read More Comments

4.2k views2 Upvotes6 Comments

Our team is working to scale our current team through cross training and upskilling but we have legacy tech through the IBMi with extreme towers of knowledge. Can anyone share advice for success unraveling towers of knowledge on legacy tech and RPG? Scaling your tech dept to move faster as you work towards modernization?

Applications & Platforms Strategy & Architecture Relationship Management+8 more

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

That's a tough one. We went through a similar situation, going from an entirely in-house data center, to a fully Cloud based environment, and we had a massive amount of combined knowledge and experience in our legacy ...read more

3 2 Replies

Read More Comments

1.4k views2 Upvotes5 Comments

Name an app or a tool that wowed you in the last 12 months. Why?

Applications & Platforms

Graham GilliesCIO at MenHealth/MyUroflow in Services (non-Government)a year ago

https://toggl.com

I hated time tracking as much as everyone I know until I discovered Toggl. I love its simple UI, cross-platform support and integration with my calendar. I work out of my calendar all day and Toggl ...read more

1

Read More Comments

402 views1 Upvote4 Comments