Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by IANS Research
IANS Research and Artico Search Release Snapshot Report on Fortune 500 Security Organizational Design Trends
, /PRNewswire/ -- Today, IANS Research and Artico Search released a snapshot report previewing key findings from its 2025 Security Organizational Design Benchmark Report. The snapshot report offers CISOs an inside look at how Fortune 500–size enterprises structure their security organizations, allocate staffing budgets, and set compensation levels for leadership and technical roles.
IANS and Artico Search Release Compensation and Budget Report for CISOs in the Small and Middle Market
New Report Reveals CISOs Face Expanding Risk, Greater Resource Constraints, and Overextension of Responsibilities Impacting Job Satisfaction , /PRNewswire/ -- IANS Research and Artico Search today released the 2025 Compensation and Budget for CISOs in the Small and Middle Market Benchmark Summary Report offering a detailed look at how cybersecurity leaders in organizations with up to $1B in annual revenue are managing rising responsibilities with lean teams, limited budgets, and evolving...
IANS Research and Artico Search Unveil the 2025 Cybersecurity Staff Compensation Benchmark Report
Report Highlights Large Compensation Gaps, Limited Career Growth, and Return to Office Mandates Create Hiring and Retention Challenges in the Cybersecurity Talent Market BOSTON, Feb. 20, 2025 /PRNewswire/ -- Today, IANS Research and Artico Search released the 2025 Cybersecurity Staff Compensation Benchmark Report, providing a comprehensive look at cybersecurity staff compensation, job satisfaction, and hiring trends.
How to Mitigate Your Risk as a CISO
CISOs must not only protect and defend their organization’s assets but also safeguard themselves as individuals. A strategic plan and clear communication are effective tools for a CISO’s personal protection. This piece provides recommendations for mitigating a CISO’s risks, including tips on retaining a personal attorney. The CISO Role: A Landmine of Potential Risks Today’s CISOs may find themselves increasingly concerned about potential legal liability.
IANS Research and Artico Search Unveil State of the CISO 2025 Report
Research Reveals Majority of CISOs' Roles Expand Beyond Cybersecurity, Yet Only 3% See Compensation Increases Tied to New Responsibilities BOSTON, Jan. 14, 2025 /PRNewswire/ -- Today, IANS Research and Artico Search released their State of the CISO 2025 Report, an annual research study providing deep insights into the evolving Chief Information Security Officer (CISO) role.
State of the CISO, 2025 is Live
As the cybersecurity function becomes increasingly integral to organizations, the CISO role continues to grow in importance, complexity, and scope of responsibilities. This evolution presents an opportunity for CISOs to expand their strategic influence with top leadership and opens up avenues for professional growth.
IANS Research and Artico Search Unveil 2024 Security Leadership and Organization Report
New benchmark report provides crucial insights for CISOs on organizational planning, design, talent acquisition, and compensation strategies BOSTON, Nov. 14, 2024 /PRNewswire/ -- Today, IANS Research and Artico Search released their 2024 Security Leadership and Organization Benchmark Report, an annual research study that analyzes security organization planning across revenue segments and industries.
Access Key CISO Comp Data and Trends: Our CISO Comp Report is Live!
A critical CISO responsibility is shaping the structure, operations and efficiency of their security organization and ensuring scalability and adaptability as the wider organization evolves. This includes a long list of decisions around hierarchical design, span of control, staff leveling, compensation, functional department creation, leadership appointments, reporting structures, degree of outsourcing and more.
New Report from IANS Research and Artico Search Reveals CISO Compensation Remains Strong Despite 2024 Market Slowdown
, /PRNewswire/ -- Today, IANS Research and Artico Search unveiled its fifth annual study, the CISO Compensation Benchmark Summary Report, which analyzes detailed compensation data for Chief Information Security Officers (CISOs) across various industries and ownership structures. The report includes data collected from over 755 CISOs between April and August 2024. Despite a slowdown in hiring and tightened budgets, CISO compensation packages remain robust.
Access Key CISO Comp Data and Trends: Our CISO Comp Report is Live!
Following an active market for CISOs in 2021 and 2022, the demand for top security talent softened in 2023 and remained calm through the first half of 2024. During that period, many companies tightened budgets and adopted more cautious hiring practices, resulting in a quieter market with reduced CISO rotation and fewer aggressive counteroffers. In this piece, we’re breaking down three compelling data points from our 2024 CISO Compensation Benchmark Report.
New Research Reveals Security Budgets Only Increased 2 Points in 2024, While 12% of CISOs Faced Reductions
, /PRNewswire/ -- Today, IANS Research and Artico Search unveiled the 2024 Security Budget Benchmark Report, offering critical insights into the state of security budgets and staffing amidst a backdrop of global economic challenges. This comprehensive study compiled findings from the fifth annual CISO Compensation and Budget Research Survey, including responses gathered from over 750 Chief Information Security Officers (CISOs) between April and August 2024.
2024 Security Budget Benchmark Report: Key Findings
Amidst global economic and geopolitical uncertainty, markets are jittery, companies are spending frugally and investors remain cautious. Security budgets are also affected by these realities, with most budgets remaining flat or increasing modestly. Situations of significant budget and staffing growth typically occur in response to external risks or the evolving maturity of the security function.
How to Approach DLP as a Process to Drive Business Value
Data Loss Prevention (DLP) is a critical tool to help organizations mitigate the risk of malicious or accidental data leaks. This piece emphasizes the importance of understanding DLP business drivers, the evolving technology landscape and the processes behind these tools to maximize their value. This piece also delves into new areas, such as DLP’s role in the context of generative AI and the remote workforce. Planning a DLP Deployment Successful DLP programs start with planning.
Vendor Consolidation: Identifying Overlaps and Maximizing Value
As organizations are increasingly asked to do more with less, now is a great time to explore cybersecurity consolidation both with vendors and the tools and services they provide. Your own relationships with vendors are shaped by economics, driving you to accumulate vendors over time to a point where costs can be significant.
Understanding the Evolving Privacy and Regulatory Landscape
The acceleration of digital transformation initiatives has rendered traditional security architectures, tools and techniques ineffective against the modern adversary. New privacy regulations are forcing organizations to review their data collection and management processes to minimize the data they manage. They also tend to impose stricter data-sharing requirements as well. This piece explains how cybersecurity laws and regulations especially in privacy are evolving to reflect this new reality.
IANS Research Launches New Privacy Operations Offering to Simplify Compliance for CISOs, Privacy, and Compliance Teams
, July 11, 2024 /PRNewswire/ -- Today, IANS Research, a Boston-based cybersecurity research and advisory firm, launched IANS Privacy Operations, a new subscription-based offering designed to help Chief Information Security Officers (CISOs), Privacy, and Compliance teams navigate the complex and evolving landscape of global privacy regulations.
Evolve Security Architecture: Prep for the Future
Organizations are changing the way security architecture factors into IT operations and engineering design, requiring a stronger focus on broad governance, cloud and DevOps workflows, automation and more. This piece explains how the security architecture function is evolving and the key initiatives to put in place now to better prepare the team for the future.
Build an Effective BCDR Plan for the Cloud
Business continuity and disaster recovery (BCDR) are more successful with top-down enforcement, starting with the board and the executive team, as well as key stakeholders held accountable for their respective pieces of the program. This piece details BCDR best practices when migrating to the cloud to ensure recoverability and continuity. Planning for Cloud Platform Failure Cloud platforms have tremendous resiliency, but nothing is completely fault tolerant.
RSAC 2024: Key Takeaways and InfoSec Trends
IANS was a research partner and our Faculty presented during multiple sessions at the 2024 RSA Conference in San Francisco. RSAC is the central meeting place for the cybersecurity community, with more than 500 sessions and 40,000 security professionals and luminaries in attendance. Nick Kakolowski and Gina Glendening, two of IANS’ senior research directors, and Mark Clauss, chief product officer, were there and are now sharing their reflections on RSAC 2024. 1.
Why Building a Cloud-Specific IR Playbook is Critical|IANS Research
Numerous Snowflake customers have reported cybersecurity incidents over the past weeks pointing to Snowflake as a likely nexus in the incidents. Separately, the threat actor group claims it breached Snowflake’s network and had access to hundreds of customers. Although Snowflake denies this claim, researchers have viewed sample data from the threat actor group and attested that it appears to be legitimate.
Tips to Negotiate Higher Pay
Current market conditions make it difficult to make a job switch. There are fewer open positions than in previous years, and hiring managers and internal teams take time to navigate this unique talent market. Here are tips from IANS and Artico Search to help CISOs and security leadership improve their current compensation and position themselves strongly for new opportunities. Vocalize the risk to the security posture of underpaying staff A security executive is inherently a risk executive.
IANS Research Receives Strategic Investment From the Apax Digital Funds to Accelerate Growth and Market Leadership in Information Security
Investment will enable IANS to support more Chief Information Security Officers (CISOs) and their teams to secure their businesses in a rapidly changing environment. IANS Research, the leading provider of independent research and advisory services for the information security industry, has announced a new strategic investment from the Apax Digital Fund II (the “Apax Digital Funds”).
Prioritize Security Projects for Leadership: Build a Risk Impact Matrix
An effort vs. impact analysis provides visibility into the value associated with the operational requirements of a security project. This allows for dynamic prioritization of initiatives as priorities and capabilities change. This piece provides an effort vs. impact template you can use to assess risks and threats relative to the work needed to address those issues.
Tips for Advancing Your GRC Program
Building out a governance, risk management and compliance (GRC) program requires controls and frameworks to push consistency, build inventories and standardize processes. You need to engage with compliance, security, IT, finance and more to build a cross-functional task force. This piece provides steps to flesh out your GRC program using key components of risk management.
IANS Faculty 2024 Cyber Predictions: Security Market Hiring Trends
Cybersecurity was not spared from the inflationary pressures and economic instability during the past year. Budget, staff and hiring cuts were made in various enterprise areas. As the year begins, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024. In this short video clip, IANS Faculty member Olivia Rose discusses what these cyber budget cuts and related hiring trends mean for your security program.
Address the Top 6 Objections to Zero Trust in Healthcare
Implementing zero trust is difficult in any environment, but healthcare organizations, especially those involved in patient care, tend to find it particularly challenging. This piece details six common stakeholder objections to implementing zero trust in the healthcare sector and provides some effective strategies for overcoming them.
Improve Phishing Awareness and Prevention
Phishing remains one of the most prolific attack vectors for cybercriminals. This infographic -- intended for security awareness -- details common phishing email characteristics and offers guidance to avoid being phished.
How to Identify Staff for Senior Infosec Roles
Identifying top-tier talent and ensuring their advancement through coaching, development and promotion is essential to building a mature security organization. This piece explores the various criteria that determines whether an individual is ready for promotion or advancement on your Infosec team. The Great Cybersecurity Talent Shortage The last decade saw an explosion of cybersecurity threats and breaches, and a consequence of that is a heavy demand for cybersecurity professionals.
Comp, Budget and Satisfaction for CISOs in Financial Services: Benchmark Report is Live
The financial services sector is known for its mature cyber programs, driven by strict regulations, a constant high cyber threat level, and low-risk profiles. This industry’s high level of cyber sophistication helps to drive and influence market trends in CISO compensation, security budgets and satisfaction levels.
Key Infosec Staffing Insights: The Cybersecurity Staff Comp Report is Live!
Infosec leaders have been facing a talent shortage for years. Growing financial demands and mounting responsibilities force CISOs to do more with less, making hiring and retention a critical topic. Feedback from CISOs centers on a common theme: Typical corporate bands and role categorizations often do not align with the infosec talent market.
Why Building a Cloud-Specific IR Playbook is Critical
Developing incident response (IR) playbooks specifically for the cloud is critical for all organizations with assets deployed in PaaS and IaaS cloud environments. Because cloud environments have unique assets, services, event types and controls, security teams need detection and response playbooks that align with the actual environment, which often differs significantly from on-premises infrastructure.
AI Governance: Tech Problems Without Tech Solutions
This piece is part of our ‘Faculty Focus' series, an interview-style article where a member of the IANS Faculty shares firsthand, practitioner-based insights on an infosec topic. In this feature Alex Sharpe discusses common AI adoption challenges for organizations and provides guiding principles to craft AI governance strategy. Alex Sharpe is a long time Cybersecurity and Privacy expert (+30 years) with real world operational experience.
Use NIST to Secure Baseline Configurations and Mitigate Risk
Multiple NIST standards allow for tailoring, i.e., changing the effects or prescriptive nature of a control based on a risk assessment of the specific vertical or other factors. NIST’s secure baseline standard (SP 800-128) explicitly calls out the use of risk assessments to tailor baselines and configuration monitoring. This piece details how to modify secure baseline configurations to account for risk and improve efficiency.
Ensure a Smooth Transition to New Security Leadership
Planning for expected and unexpected security leadership transitions is essential to maintaining a comprehensive infosec program. This piece explains the importance of good succession planning and documentation to help ensure the program remains effective, even in the face of unexpected leadership turnover.
The Role of SBOMs, Segmentation and Access Controls in Supply Chain Security
Reducing supply chain risk requires visibility, provenance and security. This piece explains how a software bill of materials (SBOM), segmenting and restricting access, can help secure the supply chain. Supply Chain Risk for Enterprises Every organization, large or small and regardless of vertical, is susceptible to supply chain risk—aka the idea that malicious code or objects can be introduced to your software upstream in the software procurement workflow.
IANS Faculty 2024 Cyber Predictions: Storm Attacks and Ransomware
Nasty ransomware and storm attacks plagued organizations during the year, and no one was immune -even casinos, a prime target for financially motivated attacks. Storm attacks released a dangerous security bug that enabled paralyzing supply chain damage to downriver targets. As the year draws to a close, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024.
Leadership Compensation Negotiation Checklist
This checklist combines real-world experience from security leaders as well as market-based insights from cybersecurity recruiters to help leadership negotiate an optimal compensation package. Leadership Compensation Negotiation Checklist Leverage your recruiter’s negotiating knowledge Discuss your ‘wants’ and ‘nice to haves’ with your main recruiter Team with them to understand components of your offer, especially detailed items like complex equity packages Tip: Find the right search partner.
CISO Challenges in Data Security: Best Practices for Privacy Compliance
As part of Data Privacy Week, IANS Faculty offer tips and insights focused on data integrity to ensure that policies are in place that manage, control and protect both personal and organizational data. In this feature, Rebecca Herold discusses common privacy and new data protection legislative challenges and provides best practices to make the compliance process much more efficient and effective.
Understand New Privacy Laws: Guidance for Organizations
As part of Data Privacy Week, IANS Faculty offer tips and insights focused on data integrity to ensure that policies are in place that manage, control and protect both personal and organizational data. In this feature, Rebecca Herold discusses common privacy and new data protection legislative challenges and provides best practices to make the compliance process much more efficient and effective.
IANS Faculty 2024 Cyber Predictions: SaaS Market Trends
Cybersecurity was not spared from the inflationary pressures and economic instability during the past year. Budget, staff and hiring cuts were made in various enterprise areas. Volatile market conditions spurred large SaaS organizations to acquire the technology of smaller SaaS companies - to their advantage. As the year begins, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024.
State of the CISO, 2023–2024: Benchmark Report is Live
Tightening budgets, increased breach volumes, advanced AI tools and new SEC mandates - 2024 brings a unique mix of challenges and opportunities for CISOs. Navigating an exceptionally complex landscape, CISOs are having to do more with less and risk personal legal exposure. The upside? Increased pressure on organizations gives CISOs more leeway to influence business leadership along with an unprecedented opportunity to argue for a place in the executive ranks.
AI and Third Parties: How to Hold Vendors Accountable
Today, no security controls can completely guarantee your data is protected when your third-party vendors use an AI tool. However, there are methods to reduce the risk. This piece provides a list of questions to ask vendors about their use of AI and recommends ways to use your own organization’s AI policy to manage expectations and ensure vendors never expose your data without your consent.
IANS 2024 Cyber Predictions: ChatGPT Uncovers Zero-Day Vulnerabilities
A zero-day vulnerability is one of the severest threats an organization can face. Undiscovered vulnerabilities leave the organization wide open to breaches impacting funds, data, and intellectual property - no system or device is immune. As we embark on a new year, IANS Faculty members take center stage to offer their thoughts on the trending topics for InfoSec in 2024.
IANS 2024 Cyber Predictions: AI APIs Will Increase Security Risks
As organizations move more towards DevOps and away from monolithic applications, new application programming interfaces (APIs) are released constantly. The surge in AI technologies now makes it relatively simple for anyone to build an API with low code or no code. On the flip side, AI produced code results in unsecured APIs that provide an entry point through which your back-end private systems, data and resources are exposed.
Determine the Cost and Impact of a Security Breach
The financial effects of a data breach can range from losses due to business disruption and data exposure to regulatory fines, brand impacts and legal costs. This piece highlights the differences between security incidents and breaches and provides a process for determining breach costs specific to your organization. Security Incident vs. Breach: What are the differences?
SEC Cyber Disclosure Requirements: CISO Summary Checklist
The SEC has adopted new regulations that require publicly traded companies to disclose “material” cybersecurity incidents within four days, as well as make periodic disclosures around their cybersecurity risk governance. The new rules take effect on December 18, 2023. This piece summarizes the key SEC regulations and corresponding requirements outlined in the new rule to help CISOs and security teams gain compliance efficiently.
IANS Faculty 2024 Cyber Predictions: Machine Learning and Security Branches Out
It is still very early in the ongoing integration of machine learning models with existing products including IAM, and there’s a long way to go before infosec, as an industry, understands what technology should and should not do. As the year draws to a close, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024.
Create an Actionable CISO Dashboard: Build Meaningful Metrics
CISO metrics are composed of a measure, trend and goal. These metrics support one of the three C’s: coverage, configuration and capability effectiveness. This piece provides guidance for using these principles to create meaningful metrics to populate a CISO dashboard. What Is a Security Metric? For many metrics, the problem is with their definition. Once what a metric is and how those metrics are built are defined, at least half the problems with creating those metrics vanish.
IANS Faculty 2024 Cyber Predictions: IT/OT Technology Convergence
Ensuring enterprise IT and OT are managed effectively and securely is no simple feat. With the continued convergence of digital and physical environments, organizations must take a unified approach to IT and OT across risk assessments, threat modeling, controls validation and resilience. As the year draws to a close, IANS Faculty members take center stage to offer their thoughts on the trending topics in InfoSec for 2024.
CISO SEC Incident Risk: Best Practices Checklist
On Oct. 30, 2023, the SEC charged SolarWinds and its CISO, Timothy G. Brown, with “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” On the heels of the FTC case against Uber’s former CSO Joe Sullivan, these legal cases have generated a lot of discussion and concern among CISOs and cybersecurity professionals.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with IANS
Contact IANS, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack