Worst Question Award Goes to "How Secure Are We?"

<p>Images and links for this episode can be found at CISO Series (<a href= "https://cisoseries.com/worst-question-award-goes-to-how-secure-are-we/">https://cisoseries.com/worst-question-award-goes-to-how-secure-are-we/</a>)</p> <p>We've got better ways to determine the overall quality of your security posture than asking this unanswerable question. It's all coming up on <em>CISO/Security Vendor Relationship Podcast</em>.</p> <p>This episode is hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href="http://twitter.com/dspark">@dspark</a>), producer of CISO Series and founder of <a href= "http://sparkmediasolutions.com/">Spark Media Solutions</a> and <a href= "https://www.linkedin.com/in/mikevj/">Mike Johnson</a>. Our guest this week is <a href= "https://www.linkedin.com/in/helenpatton/">Helen Patton</a> (<a href="http://twitter.com/osucisohelen">@osucisohelen</a>), CISO, <a href="https://www.osu.edu/">Ohio State University</a>.</p> <p><em><strong>Thanks to this week's podcast sponsor Trend Micro.</strong></em></p> <p><a title="Trend Micro" href= "https://www.trendmicro.com/en_us/business/products/hybrid-cloud/cloud-security.html"> <img src= "https://assets.libsyn.com/secure/show/24425/Trend_Micro_Banner_Ad.gif" alt="Trend Micro" width="600" height="100" /></a></p> <p><!-- wp:paragraph --></p> <p><strong>On this week's episode</strong></p> <p><!-- /wp:paragraph --> <!-- wp:heading --></p> <h2>Why is everyone talking about this now?</h2> <p><!-- /wp:heading --> <!-- wp:paragraph --></p> <p>Jamil Fashchi, CISO, Equifax, "In speaking with a CEO the other day, I was asked, <a href= "https://www.linkedin.com/feed/update/urn:li:activity:6540220163986386944"> 'As someone who isn’t technical, what questions should I ask to determine if my security team is effective?'"</a> This caused a flurry of discussion. What's your advice, and do you agree it's a lot better question than "How secure are we?"</p> <p><!-- /wp:paragraph --> <!-- wp:heading --></p> <h2>Hey, you're a CISO, what's your take