Jagan Vaman, CISA. CGEIT. C|CISO Business Technology & IT Security Adviser www.cymax.in

1. CyMax
Is Cyber Security the
Elephant
in the Boardroom
Jagan Vaman

2. CyMax
Hello!
I am Jagan Vaman
I am a Blender of Business &
Technology and a trusted partner of
Customers!
You can find me at:
@jaganvaman/linkedin

3. CyMax
Quote “So we had to get very, very
tough on cyber and cyber warfare. It is a
huge problem. I have a son—he’s 10
years old. He has computers. He is so
good with these computers. It’s
unbelievable. The security aspect of
cyber is very, very tough. And maybe,
it's hardly doable. But I will say, we are
not doing the job we should be doing.
But that’s true throughout our whole
governmental society. We have so many
things that we have to do better. And
certainly cyber is one of them.” Unquote

4. CyMax
EY Security Incident Response Readiness Survey
– Mar2017
➜Over 70% of the Organizations do not
have their Cybersecurity strategy
aligned with Business
➜58% Lack confidence in their
Organizations Cybersecurity Programs
➜33% do not have Cybersecurity
strategy!! With 1-3 year roadmap…
!?

5. CyMax
Cybersecurity is complex

6. CyMax
Yes!! Its really Complex

7. CyMax

8. CyMax
➜Cyber Vision
➜Cyber Journey
➜Cyber Landscape
➜Two states analysis – Current Vs
Future
➜Cyber Road Map
➜Cyber Portfolio
➜Cyber Crown Jewels approach
How to Simplify and Communicate Cyber Security
to the CEO & The Board?
Culture eats strategy for breakfast – Peter Drucker

9. CyMax
Vision
&
Communication

10. CyMax

11. Vision and Communication
Effective Vision
Simple
Compact
Clear
Communicative
Contextual
Challenging Muddle
Complex
No Grounding
Scare Tactics
Risk
Jargons
Confusing
No ROI

12. CyMax
Articulating the Cyber Security Journey

13. CyMax
Technology Landscape Overview

14. Threat Landscape

15. CyMax
Framework made simple

16. CyMax
Dovetailing Architecture with Framework

17. CyMax
Architecture Development Approach

18. CyMax
Key Tactical Steps

19. CyMax
Example Cybersecurity Roadmap

20. CyMax
Current State of Cybersecurity

21. CyMax
Future State of Cyber Security

22. CyMax
Portfolio Approach

23. CyMax
People Portfolio

24. CyMax
Crown Jewels Approach

25. CyMax
Crown Jewels Approach
Source – US President Office Economic Report 2011

26. CyMax
Thanks!
Any questions?
You can find me at:
@jaganvaman/ LinkedIn
JaganVaman@outlook.com

27. CyMax
CREDITS
Special thanks to all the people who made and
released these awesome resources:
➜ Presentation of Nick Yoo / RSAC2017
➜ Presentation of Adam Shostack / RSAC 2017