Jenai Marinkovic doesn’t put much stock into figures that show how many attacks she and her security team have stopped.
Those numbers, she says, really don’t provide any insights.
“Saying we blocked a million doesn’t tell us anything. It doesn’t communicate enough to other executives,” says Marinkovic, who provides virtual CISO services through Tiro Security and serves on the Emerging Trends Working Group with the IT governance association ISACA.
Marinkovic says CISOs instead need to find metrics that provide actionable information that they and the other enterprise leaders can then use to make decisions.