In this episode of CISO Tradecraft, the host, G Mark Hardy, delves into the concepts of responsibility, accountability, and authority. These are considered critical domains in any leadership position but are also specifically applicable in the field of cybersecurity. The host emphasizes the need for a perfect balance between these areas to avoid putting one in a scapegoat position, which is often common for CISOs. Drawing on his military and cybersecurity experiences, he provides insights into how responsibility, accountability, and authority can be perfectly aligned for the efficient execution of duties. He also addresses how these concepts intertwine with various forms of power - positional, coercive, expert, informational, reward, referent, and connection. The host further empathizes with CISOs often put in tricky situations where they are held accountable but lack the authority or resources to execute their roles effectively and provides suggestions for culture change within organizations to overcome these challenges.

Transcripts: https://docs.google.com/document/d/1S8JIRztM6iaZonGv0qhtWY4vDyBfGhs-/

Chapters

00:00 Introduction
00:22 Understanding Responsibility, Accountability, and Authority
01:20 The Role of Leadership in Cybersecurity
02:47 Exploring the Concepts of Responsibility, Authority, and Accountability
03:08 Applying Responsibility, Authority, and Accountability to the CISO Role
04:20 The Interplay of Responsibility, Authority, and Accountability
11:57 Understanding Power and Its Forms
12:43 The Impact of Power on Leadership and Influence
24:04 The Role of Connection Power in Today's Digital Age
24:40 Understanding Different Sources of Power
25:13 The Power of Networking and Connections
26:49 The Challenges of Being a CISO
29:19 Understanding the Value of Your Role
33:56 The Importance of Expert Power
37:46 The Consequences of Ignoring Maintenance
43:40 Aligning Responsibility, Accountability, and Authority
44:39 The Importance of Legal Protections for CISOs
45:30 Wrapping Up: Balancing Responsibility, Authority, and Accountability

#170 - Responsibility, Accountability, and Authority

CISO Tradecraft®

#170 - Responsibility, Accountability, and Authority