Ambassador

John Tziortzis

Associate Vice President, Information Technology & CISO

CanadaVerified Community Ambassador

Identified Expertise

Content John is Following

Please join or sign in to view John's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Are you happy in your current role?

People & Leadership Talent Management & Performance

Yes

Unsure

View Results

32k views18 Upvotes16 Comments

Which RDBMS do you feel best suits the needs of today's climate of rapid change and iteration?

Engineering

SQLite

CouchDB

PostgreSQL

MongoDB

SQLServer

View Results

12.1k views3 Upvotes10 Comments

What is the best alternative to S3?

Cloud

Microsoft

Google

SAP

other

View Results

11.1k views7 Upvotes5 Comments

Which of these digital skills are most in demand in your organization? (select all that apply)

Talent Management & Performance

Cloud computing development / operations

Software and solutions technical proficiency

Mobile computing development/operations

Experience in statistical analytics languages/platforms

User experience/design

Knowledge of machine learning

Social media engagement/analysis

Content development/management

View Results

9.3k views1 Upvote4 Comments

Who does the CIO role in your organization report to?

Team & Organizational Design

Global CIO

CEO

CFO

Board

COO

Other

View Results

3.3k views3 Upvotes1 Comment

What percent of your IT leadership is women?

People & Leadership

5-9

10-14

15-20

20+

View Results

10k views7 Upvotes6 Comments

What will your IT team look like in 2024?

Financial Management

Increase headcount

Stay flat

Decrease headcount

View Results

3.3k views2 Upvotes

What is more important to your IT organization?

Strategy & Architecture

Optimize IT Costs

Support digital initiatives

8.7k views2 Upvotes12 Comments

What is more important to your IT organization?

Strategy & Architecture

Run day-to-day IT

Deliver innovation

7.9k views2 Upvotes9 Comments

How can you build a brand for the security function that helps to reinforce secure behavior across the business?

People & Leadership Security Strategy & Roadmap Awareness & Training

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

Establishing credibility is key to building a brand, whether it's internal or external. This credibility is often derived from being a subject matter expert. It's disappointing to see people in trusted positions with mediocre ...read more

Read More Comments

190 views4 Comments

What advice can you offer security leaders currently trying to win executive support to create a secure behavior and culture program? How should they frame the business case for an SBCP?

Awareness & Training Security Strategy & Roadmap People & Leadership

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

Security awareness in most org is seen as a check in the box compliance requirement and a bit as nice to have. For me, security is part of value system, much like integrity is or focus on workforce engagement might be. And ...read more

Read More Comments

299 views5 Comments

Do you have processes for gathering feedback on security awareness training? How can leaders create effective feedback loops to identify and make improvements when needed?

Security Frameworks (NIST, CIS, CSF)Awareness & Training Security Strategy & Roadmap+1 more

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

To truly test your organizations security training effectiveness, you need to routinely test using simulated attacks. Some of the vendors already have phishing campaign management capabilities. We target the phish prone uses ...read more

Read More Comments

203 views4 Comments

What tips can you offer leaders who are looking to incorporate gamification into security awareness training? Is there a simple way to do this internally or is it typically best to seek out a third party service provider?

People & Leadership Security Strategy & Roadmap Awareness & Training

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

From my perspective, I think seeking a third party service provider is the best route. I have a tendency to outsource a lot in my business, so that might be influencing my opinion. However, if you have in-house expertise ...read more

Read More Comments

281 views4 Comments

What’s your personal opinion on phishing tests — should cyber professionals rethink this as a method for security awareness training, or is it a necessary practice?

Awareness & Training Security Strategy & Roadmap Testing+1 more

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

I believe that phishing tests are absolutely a necessary practice. Unfortunately, in today's environment, employees are often the weakest link in securing an organization. We need to ensure they are educated on the critical ...read more

Read More Comments

428 views10 Comments

What do you consider key success factors for an effective security champion program?

Security & GRC Security Strategy & Roadmap People & Leadership

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

A key success factor is ensuring that everyone in the organization understands that security affects everyone, not just the IT department or the CIO or the CISO. It's a team effort, much like a game of flag football. The ...read more

2 Replies

Read More Comments

129 views4 Comments

Have you had success with using guest speakers to drive security awareness, such as executive leaders/other internal employees, external experts or public figures? What sorts of speakers create the biggest impact, in your experience?

Awareness & Training Security Strategy & Roadmap People & Leadership

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

Personally, I haven't found much success using guest speakers, but that could be by design. My worry is that if people spend their attention focusing on the guest speaker, they might miss the message. So, I've generally steered ...read more

Read More Comments

78 views3 Comments

Do you think rewarding or recognizing individuals for secure behavior is an effective strategy? How is this tactic applied at your organization?

Awareness & Training People & Leadership Security Strategy & Roadmap

John TziortzisAssociate Vice President, Information Technology & CISO in Education2 months ago

Yes, praising or acknowledging people for their safe behavior is a successful method. At my previous and current workplaces, we established a point system that allows employees to get financial incentives based on the number ...read more

Read More Comments

476 views7 Comments

We are looking at establishing a cybersecurity technology capability model to support our cyber transformation program and are looking for an industry ‘best-practice’ reference model that we could leverage / adapt to support our needs. What models / frameworks would you recommend to accelerate us in doing this?

Strategy & Architecture Security & GRC

John TziortzisAssociate Vice President, Information Technology & CISO in Educationa year ago

The intent of this model would be to outline the range of cyber security technology capabilities that organisations need to consider in establishing a best-in-class cyber security architecture for their enterprise. Use cases ...read more

2 Replies

Read More Comments

3.3k views4 Comments

In your experience, what sort of challenges could your team members face in pursuing an ISC2 certification? How can the org help them overcome these challenges successfully?

Training & Certification Security & GRC Security Strategy & Roadmap

John TziortzisAssociate Vice President, Information Technology & CISO in Educationa year ago

There are a number of ISC2 certifications, so not clear which one you are asking about.

With that, having been a CISSP for decades and teaching CISSP prep courses, the biggest challenge is for non-native speakers. ...read more

Read More Comments

494 views5 Comments

Engagement Stats

87
Answers Written

23.5K
Profile Views

152
Upvotes Received

Awards

John has been recognized by peers as having expertise in these subjects. Learn more about awards & recognition.

Network Management
Data & Business Intelligence