built or purchased. This is very much analogous to being asked to make a building earthquake-proof after
it was already built. Cybersecurity is not very effective when you try and treat it like glitter and sprinkle it
lightly over something later on!
It may not call for high-level sophistication to fix security fundamentals, but choosing security by design
does take considerable budget, resources and requires deep organizational resolve. Most cybersecurity
experts have a good idea about what needs to be done, but persuading executives to adequately
resource and invest precious funds on security can be a challenge. That is why developing a risk-based
roadmap for improvement is a step that cannot be missed for all organizations serious about
strengthening their security posture.
About the Authors
Raef Meeuwisse is an ISACA governance and cybersecurity expert and Director
of Cyber Simplicity Ltd. He holds multiple ISACA certifications for information
security and is the author of many books on cybersecurity, including Cybersecurity
for Beginners and Cybersecurity Exposed: The Cyber House Rules. He also
created AdaptiveGRC, the world’s first single data source / zero replication
governance, risk management and compliance suite. He is an active member of
the ISACA London chapter and an entertaining international speaker.E. Douglas Grindstaff II is a successful executive with a deep experience in the
biotech and technology industries. In addition to his current role as Senior Vice
President of Cybersecurity Solutions with the CMMI Institute, he previously served
as CEO of NuSirt Sciences, CEO-in-Residence for Carnegie Innovations Portfolio
and President of the Invisible Fence brand. Prior to that, he served as Chairman and
President of Bioganic Biopesticide, where he oversaw rapid expansion into the retail
marketplace, as well as the acquisition by a well-known consumer brands company.
Grindstaff also served as an executive for a number of private and public consumer brand companies,
including Kraft Foods, Inc.