Abstract Details
10/15/2015 | 8:45 AM - 9:30 AM | Pacific II
Better LATE than NEVER; educating the non-IT executives on THEIR cyber security responsibilities
This session introduces attendees to the topic of strategic cybersecurity management in business today.
Having delivered multiple MBA/EMBA level courses over a 24 month period to government managers, military leaders, and business executives, one constant theme has evolved: cybersecurity is too technical and often viewed as another person’s job. As a result of well published data breaches and documented Advanced Persistent Threats (APT), an increased demand for management awareness and understanding of cybersecurity is an urgent imperative.
In this session attendees will hear of research, curriculum design, and in-class methods used to deliver effective cybersecurity executive/management learning experiences. Educating today’s proactive leaders, helping them realize that cybersecurity threats and risks are in fact the responsibilities of everyone in the organization, is the important outcome of the academic experience. This session will introduce attendees to the topic of strategic cybersecurity management in business today with learning outcomes of:
• an understanding of the managerial issues and resource constraints related to controlling cybersecurity activities within the business
• an awareness and importance of communicating the details of past attacks and industry collaboration to better protect future events.
• an understanding to assess and evaluate the impact of emerging information technologies and services to improve the corporate strategic cybersecurity vigilant threat posture.
• an understanding to research and lead an executive discussion on strategic cybersecurity resource investments and building an enterprise awareness action plan.
An ever increasing demand for effective cybersecurity, driven by the accelerated number of well published data breaches and internet attacks on governments, businesses, and users, increasing challenges placed upon both government and business leadership. Therefore, it is imperative for management to gain a better understanding of the cybersecurity threats and risks facing their IT operations; a support role once reserved only for the IT professional. The need for greater management cybersecurity knowledge is driven by the fact that today’s business processes have evolved into ever increasingly complex & integrated global telecommunication networks, management information systems, to collaborate with employees, suppliers, and customers. By advancing management’s understanding of cybersecurity, leadership will be better prepared in avoiding unauthorized data access, theft, and cyber related attacks. Session topics covered are:
• Cybersecurity history: the background and escalation
• Global attack arena: visualization of the speed, scale, persistence, and continuous-never ending attacks
• Today’s news: the growing list of corporate victims and the culture of silence
• IT trends driving cybersecurity as a complex wicked problem
• Gartner’s Nexus of forces (Social, Mobile, Analytics, and Cloud) and expanding the corporate cybersecurity blind spot
• Evolving and external forces in the Information Technology and Communications sector, increasing dependencies on Information Technology for efficiencies and competitive advantages; demanding greater cybersecurity
• IT architecture and the cybersecurity responsibility today (who owns the function and why it changed)
• Challenges of gaining visibility into the cybersecurity supply chain and increased importance to management’s recognition of sustainable suppliers.
• Internet of Things, Cyber Blind Spots and why managers need to be aware
• Cyber Talent Crisis: People & Generational Views (Millennials …etc. a wake-up call)
Presentation:
This presentation has not yet been uploaded.
Handouts:
No handouts have been uploaded.
Michael Donohoe (Primary Presenter,Co-Presenter), University of Pittsburgh, Katz School of Business, donohoem@pitt.edu;
Dr. Michael J. Donohoe is an information technology professional, with 35 years in various senior business, military, and academic positions. As a faculty member at the Joseph M. Katz School of Business, University of Pittsburgh, Professor Donohoe teaches undergraduate, graduate,and executive management business courses in Information Systems, Operations Management, IT Project Management, Supply Chain Management, and Executive-Level Cyber Security Management. He is a visiting professor to the Katz Global Executive MBA schools (Brazil and Czech Republic). Dr. Donohoe previously held a faculty position at The National Defense University, iCollege, educating both military and government leaders in information technology optimization.
Russell Mattern (Co-Presenter), National Defense University, matternr@ndu.edu;
Dr. Russell Mattern, a Professor of Systems Management at the National Defense University iCollege since 2002, runs two graduate-level courses; Strategies for Assuring Cyber Supply Chain Security, a Supply Chain Risk Management (SCRM) course, and Strategic Information Technology Acquisition. Dr. Mattern served 26 years in the US Air Force, retiring as a Colonel. He holds a BS and MS degree in Computer Science as well as MS degrees in other areas. He earned a Doctor of Optometry degree at Ohio State University and has been a licensed, practicing Optometrist since 1980.
