CISO Operating Model

An effective CISO operating model is fundamental to ensuring long-term resilience. Beyond technology, it requires stakeholder management, strategic alignment with business objectives, a robust governance structure, and strong leadership. The operating model determines how CISOs position themselves within the organization, how effectively they can influence decision-making at board level, and how they safeguard both people and processes. Building resilience means focusing not only on policies and frameworks, but also on leadership, talent development, and organizational culture.

The Broken Physics of Remediation - a research paper

Most remediation programs look better on paper than they perform in practice. 88% of critical CVEs were closed slower than they were exploited. Not a people problem, but a model problem.

The-Broken-Physics-of-Remediation.pdf

Stefan van Vlerken

3 months ago

Shift security efforts from reactive, post-incident to proactive, pre-incident risk mitigation

A Risk Operations Center (ROC) helps you to fix actual risk with AI speed, instead of chasing things that don't pose a threat for your specific environment

Left of Boom - The Risk Operations Center - Qualys.pdf

Stefan van Vlerken

3 months ago

Resilience as business capability

The first session of the Highly Resilient Organisations (HRO) Programme explored how leading companies are redefining resilience as a measurable business capability. Executives, regulators, and...

hro-writeup_v02.pdf

Suzanne Janse

9 months ago