Ambassador

Nikk Gilbert

CISO at RWE

GermanyVerified Community Ambassador

Identified Expertise

Content Nikk is Following

Please join or sign in to view Nikk's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Are you happy in your current role?

People & Leadership Talent Management & Performance

Yes

Unsure

View Results

32k views18 Upvotes16 Comments

Who does the CIO role in your organization report to?

Team & Organizational Design

Global CIO

CEO

CFO

Board

COO

Other

View Results

3.3k views3 Upvotes1 Comment

What percent of your IT leadership is women?

People & Leadership

5-9

10-14

15-20

20+

View Results

10k views7 Upvotes6 Comments

Have blockchain projects meaningfully impacted your revenue or cost?

Blockchain

Yes

Too early to tell

Haven't invested

View Results

8.4k views6 Upvotes2 Comments

Does your organization use vCISOs or CISOs?

Team & Organizational Design

vCISO

CISO

4.6k views2 Upvotes5 Comments

Are you thinking of replacing ServiceNow in 2024?

Applications & Platforms People & Leadership Process Management

Yes

6.6k views3 Upvotes4 Comments

How many direct reports away from the CEO is the senior-most security executive?

Security & GRC Team & Organizational Design

Direct report

View Results

12.6k views3 Upvotes6 Comments

How long does a CISO typically stay within his or her organization?

Security & GRC Talent Management & Performance

< 1 year

1 - 2 years

2 - 4 years

4 - 5 years

> 5 years

View Results

4k views4 Upvotes

Are you adopting any source code analysis tool for analysing code vulnerabilities against eg. OWASP top ten?

Security & GRC

No, not using any at all

Yes, but not checking OWASP

Yes, OWASP check, opensource

Yes, OWASP check, commercial

View Results

3k views2 Upvotes

Despite our arsenal of tools, traditional mainstays seem to struggle to keep pace with the cunning nature of spam and phishing attacks (especially with the bad actors using AI now to craft emails). Has anyone discovered alternative methods that sidestep the conventional Proofpoint or M365 email protections? I'm not talking about user awareness training – we all know its critical role, but I'm hunting for those out-of-the-box strategies that have made you think, "Ah, that's a game-changer!" Whether it's a piece of tech, a process innovation, or a dark horse in cybersecurity, I'm all ears.

Security & GRC

Nikk GilbertCISO at RWE in Energy and Utilities6 months ago

Implementing all Microsoft O365 health check recommendations and using Proofpoint + DKIM + SPF + DMARC across all company owned domains, both active and parked, has dramatically reduced (98%) the amount of spam and phishing ...read more

2 1 Reply

1k views2 Upvotes2 Comments

When staffing cybersecurity roles, have you had success with hiring candidates who lack technical experience? If so, what made that strategy effective?

Talent Sourcing & Hiring Security & GRC Security Strategy & Roadmap

Nikk GilbertCISO at RWE in Energy and Utilities9 days ago

Mentorship is crucial, especially when leading a relatively new team. I've intentionally built a team where nearly 80% are under 35. I sought out young, hungry, and energetic individuals who bring fresh perspectives and a ...read more

170 views1 Upvote1 Comment

How do you see the CISOs role in building trust across the business?

Security & GRC Security Strategy & Roadmap Business Relationships

Nikk GilbertCISO at RWE in Energy and Utilities13 days ago

CISOs play a crucial role in organizations, as data and information protection falls under their responsibility. Building trust across the organization is essential for maintaining a strong cybersecurity posture.

Collaboration ...read more

Read More Comments

186 views1 Upvote2 Comments

Do you have any tips for new CISOs struggling to navigate corporate politics? What has helped you develop this skill yourself?

Security Security Strategy & Roadmap People & Leadership

Nikk GilbertCISO at RWE in Energy and Utilitiesa month ago

The book: The Art of Influence

Read More Comments

308 views3 Comments

Can you share advice for leaders looking to shift to a multi-cloud strategy for better resilience in the event of major disruption (such as the recent CrowdStrike outage)? What best practices or common pitfalls are most important to consider?

Security Strategy & Roadmap Security Peer Insights+2 more

Nikk GilbertCISO at RWE in Energy and Utilitiesa month ago

1. Ensure the “different” providers are not front ends for the same foundational provider.

2. Review the track record of each provider on the whole as well as their record with organizations of your size, ...read more

Read More Comments

506 views3 Comments

How can CISOs influence (or perhaps even contribute to) the business’s AI adoption strategy?

Security Strategy & Roadmap Security Disruptive & Emerging Technologies+3 more

Nikk GilbertCISO at RWE in Energy and Utilitiesa month ago

CISOs have a unique opportunity to proactively shape their organization's AI adoption strategy, Because AI adoption is either in the process of emerging or companies that have already gone down a path are readjusting their ...read more

Read More Comments

701 views6 Comments

Now that the EU’s AI act is in effect, how can security leaders make sure their organization is ready for its full implementation? What should they focus on to get the business set up for success?

Security Security Strategy & Roadmap Peer Insights+2 more

Nikk GilbertCISO at RWE in Energy and Utilities9 days ago

I was fortunate to get involved with AI technology about ten years ago. For example, at a previous company, we leveraged AI to optimize the positioning of our oil platforms, which was a game-changer in efficiency and decision-making.

When ...read more

410 views1 Upvote1 Comment

How do you “read between the lines” when engaging stakeholders to better understand their needs or concerns? How can a CISO navigate those conversations to surface what might otherwise be left unsaid?

Business Relationships Security Strategy & Roadmap People & Leadership

Nikk GilbertCISO at RWE in Energy and Utilitiesa month ago

It is important to provide a safe place where people are open, honest and transparent to work through challenges. it should always be like an RCA or post mortem where there is no blame, no hiding and only focused on how ...read more

Read More Comments

364 views1 Upvote3 Comments

What metrics or KPIs did you use to measure the effectiveness of your CNAPP deployment?

Process Management KPIs, Metrics & Reporting Enterprise Applications+1 more

Nikk GilbertCISO at RWE in Energy and Utilitiesa month ago

Ensuring our CNAPP is doing its job effectively is vital. We focus on a few significant metrics to keep things tight. First, we look at how quickly we find and fix vulnerabilities. Speed is everything here because the faster ...read more

1.5k views1 Comment

What kinds of team building or culture focused initiatives/events do you have for your security teams? Is there anything you do on a regular basis to support morale/engagement?

Employee Engagement Security & GRC Culture & Values

Nikk GilbertCISO at RWE in Energy and Utilities4 months ago

Our Cybersecurity teams prioritize team building and maintaining a positive culture through various initiatives and events. We believe a cohesive and engaged team is crucial for our success. Here are some of the critical ...read more

442 views1 Comment

How do you prioritize your cybersecurity investments?

Security & GRC

Nikk GilbertCISO at RWE in Energy and Utilities6 months ago

It can be very hard to figure this out when you have vendors clamoring to sell you the newest and shiniest technology, and executive leadership poking you about something they read about in a magazine or news story (AI being ...read more

Read More Comments

972 views5 Comments

Engagement Stats

32
Answers Written

3K
Profile Views

24
Upvotes Received