Holistic Cybersecurity, Starting with Culture and Awareness: What the research says.

20% discount on Cybersecurity Readiness, from SAGE Publishing, using the promo code SAGE20

‍

‍

‍

‍

BIO

Dave Chatterjee, Ph.D. is tenured (Associate) professor in the Department ofManagement Information Systems at the Terry College of Business, The University of Georgia. As a Duke University Visiting Scholar, Dr. Chatterjee has taught in the Master ofEngineering in Cybersecurity Program at the Pratt School ofEngineering.

Dr. Chatterjee’s interest and expertise lie inthe various facets of information technology management, with current focus on cybersecurity and enterprise digitization. His work has been published in prestigious outlets such as The Wall Street Journal, MIT Sloan Management Review, CaliforniaManagement Review, Business Horizons, MIS Quarterly, and the Journal of Management Information Systems. His highly endorsed book titled Cybersecurity Readiness: A Holistic and High-Performance Approach was published by SAGE Publishing in March 2021.Dr. Chatterjee serves as Senior Editor of the Journal of Organizational Computing and Electronic Commerce and is also on the editorial board of the Journal of Strategic InformationSystems. He was honored with the Smart Cities and Critical Infrastructure Security Professional (SCCISP) credential from the IoT Security Institute on Feb25, 2022.

Dr. Chatterjee delivers talks around the world; moderates CXO panel discussions; conducts corporate training, workshops, and webinars; and provides consulting and advisory services. He has appeared on radio and TV interviews and is often quoted by news media on major technology-related developments. He has served on the corporate and community leadership board of a prestigious cybersecurity network of Chief InformationSecurity Officers (CISOs) and on a CISO SWAT team. Dr. Chatterjee is also the host of Cybersecurity Readiness Podcast Series.

An award winning and distinguished educator, Dr. Chatterjee has taught at all levels, from Freshman Seminars to core and elective courses in UndergraduateMIS, International Business, Professional MBA, Executive MBA, and Master ofEngineering in Cybersecurity programs. He also taught in the Global OneMBA and theMaster of Accounting program at the University of North Carolina, Chapel Hill.

‍

SUMMARY

‍

There are so many factors to consider and decisions to make when designing a security program. But what does the research suggest is most effective for your organization?

There’s no better authority to answer these critical questions than Dr. Dave Chatterjee, Associate Professor in the Department of Management Information Systems at the Terry College of Business at the University of Georgia and a Visiting Professor at Duke’s Pratt School of Engineering. Dr. Chatterjee will share insights he’s acquired with the field’s leading experts at the cutting edge of innovation and research into holistic cybersecurity program design. 

In this talk we will examine:

- The state of cybersecurity and the threat landscape as of August, 2022

- What are the unifying themes of the largest breaches he’s cited for his case studies in his book

- WhyCybersecurity Readiness quickly zeroes in on Culture and Commitment 

- What arethe critical elements of a transformational security culture?

- What’s the right type of awareness program to secure commitment and build culture at your organization?

- What does research suggest is important for building effective, holistic security programs for different shapes and sizes of organizations?

‍

QUESTIONS:

• Q: Before we dive into the lessons your book offers to our audience about holistic security design, could you tell us what the cybersecurity landscape looks like today, as the world limps out from under the shadow of the global pandemic and into the shadow of the Ukraine war and its cyberwar dimension?
• Q: Let’s start with the basics: What is holistic cybersecurity?
• Q: Why is it important to have a holistic cybersecurity design? Why not just go all-in on the technical perimeter?
• Q: Your book begins with a series of case studies. Why did you choose the ones you did, and what are some common themes between them?
• Q: After the case studies, why did you choose to go right into security culture?
• Q: What are some prescriptions for building a vibrant and effective security culture today?
• Q: Let’s talk about awareness. First off: does the research say that security training actually works? Does awareness training measurably lower the risk of a brach at the human layer?
• Q: In what cases will security training and awareness work best?
• Q: You’re an academic. I’m curious, from your point of view, if we as society—from business to education to civil service-- have ever confronted a problem like cyber attack and cybercrime? One where we are effectively performing our daily tasks within an environment full of predators and dangers against which most of us have not been educated or equipped to defend ourselves?

‍

‍