There are many types of risks that CIOs must address, including project risk, financial risk, and operational/security risk. To be successful, you must be clear about identifying your risks and ensure that you have a governance structure in place that allows you to prioritize the risks the business will accept and the risks you will mitigate. You can’t get risk to zero.
CIOs must understand the types of security risks they believe their organization is most prone to encounter. Unfortunately, many IT executives operate as if there is a canonical list of risks to resolve to secure an organization. Of course, there is no single answer to protect your enterprise. For most, a balance between hygiene and advanced threats is the rational approach to apply resources. The appropriate actions to take depend on your industry, your company, and your position.
A strategy to support employee use of Windows and non-Windows personal devices.
Read how Microsoft IT used the resiliency of cloud computing in its datacenter.
We’re enhancing security event-data collection and analysis using Microsoft’s Big Data platform
Microsoft IT chairs the security governance council along with three other core members. They, together with representatives from other stakeholder organizations, focus on the broad initiatives in the center of the diagram.