UB Tech 2019

TL7 | Lessons Learned From Building an Information Security Program From Scratch (Room Citrus)

11 Jun 19
2:25 PM - 3:10 PM

Tracks: Technology Leadership

As the first CISO at Duquesne University, Thomas Dugas had the opportunity to build a new Information Security program from the ground up. This effort had its challenges and rewards, and there were many lessons learned. First, you have to be sure to focus on supporting the mission of the university. Second, you have to bring the program along slowly and then bring the rest of the organization along with you. Lastly, you have to educate and inform those up the chain about what the university is obligated to do and where you need their support. In this session, you will learn how to balance supporting the mission of the university with the need to make progress in a new program. Explore ways to bring others on the journey with you and how to lead from the middle and manage up. And, from the perspective of everyone involved with security, you will learn ways to convince decision-makers that security is needed and funding is necessary.