Ambassador

Malcolm Harkins

Board Member, Advisor, Executive Coach

United StatesVerified Community Ambassador

Identified Expertise

Content Malcolm is Following

Please join or sign in to view Malcolm's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Are you happy in your current role?

People & Leadership Talent Management & Performance

Yes

Unsure

View Results

31.5k views18 Upvotes15 Comments

Which browser do you use at work?

Applications & Platforms

Internet Explorer

Microsoft Edge

Google Chrome

Mozilla Firefox

Safari

Brave

Other

View Results

13.5k views3 Upvotes7 Comments

How many direct reports away from the CEO is the senior-most security executive?

Security & GRC Team & Organizational Design

Direct report

View Results

12.6k views3 Upvotes6 Comments

How long does a CISO typically stay within his or her organization?

Security & GRC Talent Management & Performance

< 1 year

1 - 2 years

2 - 4 years

4 - 5 years

> 5 years

View Results

4k views4 Upvotes

The Organizations intranet was developed internal or external? The platform/software is open source or commercial?

Applications & Platforms

Internal

External

Open

Commerical

View Results

3.6k views3 Upvotes2 Comments

Are you attending Dreamforce?

News

Yes

Remotely

Unsure

Other (comment)

View Results

2.2k views2 Upvotes

How concerned should startups be about cybersecurity?

Security & GRC Financial Management Risk Management

1- Very worried

2 - Somewhat concerned

3 - Low priority

4 - Not concerned at all

View Results

6.3k views1 Upvote4 Comments

Do you/your teams plan on working from home because of the coronavirus warnings?

Culture & Values

Yes

Unsure

Other (please write a comment)

View Results

3.9k views3 Upvotes6 Comments

How long could your company sustain a completely remote workforce?

People & Leadership Process Management News

1-3 months

Less than 6 months

Between 6 and 12 months

Longer than 12 months

We can't have a completely remote workforce

View Results

6.7k views2 Upvotes15 Comments

Have you seen a rise in disinformation or misleading statements within your organization during the COVID-19 crisis?

Culture & Values

Yes

2.8k views1 Upvote1 Comment

Scant evidence that cyber insurance boom is leading to better security (scmagazine.com) Do folks really think cyber insurance would have lead to improvements in security? I never did ... what do others think?

People & Leadership Governance, Risk & Compliance Crisis Management

Malcolm HarkinsBoard Member, Advisor, Executive Coach in Software3 years ago

When the cyber insurance company attempts to deny you coverage, you definitely need to step up your game. I think there's a false sense of security with having cyber insurance, however, it serves the purpose of transfering ...read more

1.2k views1 Upvote1 Comment

How do you lead during turbulent times ? I was recently able to talk to Eric McNulty who is a crisis leadership expert that has written several books and teaches at Harvard. If you get a chance listen to the podcast and share your thoughts Leading in Turbulent Times - We need to create conditions to problem solve (buzzsprout.com)

People & Leadership Strategy & Architecture Process Management+2 more

1.1k views5 Upvotes

what does everyone think of this article and my perspective ? Have we done enough ? Have policy makers done enough ? https://www.linkedin.com/feed/update/urn:li:activity:6770027790344429568/

People & Leadership Strategy & Architecture Cloud+8 more

Malcolm HarkinsBoard Member, Advisor, Executive Coach in Software2 years ago

Loved it :) thanks for Sharing

583 views6 Upvotes1 Comment

If these companies were affected then the foundation of computing could be at risk. If you could manipulate at the hardware layer via the firmware, BIOS, ect then a threat actor could weaponize well below the operating system which brings in to question the integrity of the entire computing stack and everything above it. The firmware and bios are like the rebar and concrete for a building. If that foundation is weak then the entire structure and anything dependent on it is at risk. We cannot underestimate the potential or the severity of these companies being potentially affected by the SolarWinds hack and what that means for the foundational computing hardware they provide to the world. What do others think ? How could this impact your organization ? <a href="https://www.theverge.com/2020/12/21/22194183/intel-nvidia-cisco-government-infected-solarwinds-hack">Big tech companies including Intel, Nvidia, and Cisco were all infected during the SolarWinds hack - The Verge</a>

People & Leadership Cloud Applications & Platforms+31 more

Malcolm HarkinsBoard Member, Advisor, Executive Coach in Software3 years ago

The message here is: one is never out of the woods ever, so pay attention! Just because today's news eclipses yesterday's doesn't mean companies get to shove the bad under the rug and stay silent. Remember, vulnerabilities ...read more

1.1k views1 Upvote1 Comment

would love to hear what people think of my blog as well as the RSAC webcast if you get a chance to watch it. Thank you as well to the pulse community who answered the survey back a few weeks ago as well https://www.linkedin.com/feed/update/urn:li:activity:6743181944382742528/

People & Leadership Security & GRC Risk Management+6 more

912 views4 Upvotes

What do folks think about cyber security information sharing ? Let me know and check out this podcast with Frank Grimmelmann the head of the Arizona Cyber Threat Response Alliance (ACTRA). https://www.buzzsprout.com/1312267/6420151-community-trust-culture

People & Leadership Governance, Risk & Compliance Security & GRC+9 more

Malcolm HarkinsBoard Member, Advisor, Executive Coach in Software4 years ago

It is quite valuable and important.

But doing it right takes a lot of work.

At the organizational level, the FS-ISAC is the gold standard. But to make it work, the financial services firms poured tens of thousands ...read more

316 views2 Upvotes1 Comment

If you get a chance listen to my new podcast and let me know what you think. Can really stop stupid ? I think so but would love to hear what others think. https://www.buzzsprout.com/1312267/6206752-you-can-stop-stupid

People & Leadership End-User Services & Collaboration Process Management+10 more

2k views

What do folks think about this ? https://www.cpomagazine.com/data-protection/hm-hit-with-e35-million-gdpr-fine-for-profiling-private-lives-of-employees/ So many useful things to learn from looking at this .... here are just a few obvious ones. 1) Rogue management team collecting employee information 2) Mismanaging the storage of that information so that it was vulnerable 3) A breach of the data that never should have been collected 4) A fine for GDPR violations and one for employee data not consumer ... Finally - What about covid19 return to work processes, data collection, use, storage, security, ect ... if your not already on top of making sure your doing privacy and security right for this ... your WAY BEHIND !

People & Leadership Process Management Governance, Risk & Compliance+9 more

Malcolm HarkinsBoard Member, Advisor, Executive Coach in Software3 years ago

Wow and thanks for sharing this. I'd like to believe that is an isolated instance. It is incredible to read about a large generally liked organization institutionalizing the kind of employee information misuse that ...read more

659 views6 Upvotes1 Comment

Interesting to see such a disconnect. Is it because we are "watering down" what is reported to the board because of executive pressure? Is it because we have not done a good job of connecting cyber risks to broader business risks or an organizations social responsibilities ? or is it something else ?? Or perhaps the business is numb to the issue and is just accepted the sorry state we are in on managing these risks ? Wonder what others think .... https://www.techrepublic.com/article/report-despite-more-cyberthreats-during-covid-19-most-businesses-confident-about-cybersecurity/

People & Leadership Governance, Risk & Compliance Security & GRC+12 more

1.4k views3 Upvotes

How do others conduct phishing tests ? Do you punish employees when they fail ? https://www.scmagazine.com/home/security-news/phishing/insensitive-phishing-test-stirs-debate-over-ethics-of-security-training/

Security & GRC Legal Threat & Vulnerability Management+5 more

Malcolm HarkinsBoard Member, Advisor, Executive Coach in Software4 years ago

Yes we do phishing tests. It is a must for every employee to do this at joining and refresh every so many months. For people who fail they need to complete a security training in XX days.

2 1 Reply

331 views1 Upvote2 Comments