The Top 10 Skills CISOs Need in 2024

News provided by

Carnegie Mellon University Software Engineering Institute

Jan 24, 2024, 10:17 ET

"Think Beyond Enterprise IT" Advises First U.S. Federal Government CISO

PITTSBURGH, Jan. 24, 2024 /PRNewswire/ -- "The role of the chief information security officer (CISO) has never been more important to organizational success," writes Greg Touhill, director of the CERT Division of the Software Engineering Institute at Carnegie Mellon University in an SEI Blog post https://insights.sei.cmu.edu/blog/the-top-10-skills-cisos-need-in-2024/ released today. In the post, Touhill, who was appointed by President Barack Obama to be the first CISO of the federal government, outlines the top 10 skills CISOs need for 2024 and beyond.

Gregory J. Touhill, director of the CERT Division at the Carnegie Mellon University Software Engineering Institute, was the first CISO of the U.S. federal government.

"The present and near-future for CISOs will be marked by breathtaking technical advances, particularly those associated with the inclusion of artificial intelligence technologies being integrated into business functions, as well as emergent legal and regulatory challenges," he writes. "Continued advances in generative artificial intelligence (AI) will accelerate the proliferation of deepfakes designed to erode public trust in online information and public institutions. Furthermore, these challenges will be amplified by an unstable global theater in which nefarious actors and nation states chase opportunities to exploit any potential organizational weakness."

Touhill advises CISOs to

Master AI Before it Masters You—CISOs need to understand the power and potential of AI-enabled technologies well beyond the mechanics of how AI is constructed and operated.
Improve Communication with the Board and C-Suite—Boards of directors and their various committees are increasingly calling on CISOs to provide in-person briefings and related materials.
Manage Risk Using Advanced Metrics and Risk Quantification—Evidence trumps anecdotes. CISOs need to have timely, accurate, and meaningful metrics to best manage the cyber risk posture of the organization.
Think Beyond Enterprise IT—Too many CISOs remain fixated on the enterprise IT network as their center of gravity and need to look at their key cyber terrain through the lens of the business.

Read the complete detailed list at https://insights.sei.cmu.edu/blog/the-top-10-skills-cisos-need-in-2024/.

The new year may shape up to be a pressure cooker environment for CISOs in which advanced skills are critical. In 2024 and beyond, CISOs will need to be adept at technical, managerial, leadership, and communications skills to help their organizations thrive in today's complex and dynamic globally connected environment.

For more information about this topic and other topics in software engineering, cybersecurity, and artificial intelligence, visit the SEI Blog at https://insights.sei.cmu.edu or the Software Engineering Institute website at https://sei.cmu.edu.

About the Carnegie Mellon University Software Engineering Institute
Always focused on the future, the Software Engineering Institute (SEI) advances software as a strategic advantage for national security. We lead research and direct transition of software engineering, cybersecurity, and artificial intelligence technologies at the intersection of academia, industry, and government. We serve the nation as a federally funded research and development center (FFRDC) sponsored by the U.S. Department of Defense (DoD) and are based at Carnegie Mellon University, a global research university annually rated among the best for its programs in computer science and engineering. For more information, visit the SEI website at http://www.sei.cmu.edu.

SOURCE Carnegie Mellon University Software Engineering Institute