In organizations, the separation between IT and cybersecurity can create challenges in achieving security objectives as these departments often have differing priorities and performance metrics. Effective collaboration can be fostered by aligning cybersecurity goals with organizational priorities, communicating effectively, being aware of other teams’ workloads, and showcasing visibility of cybersecurity efforts. Affected: Cybersecurity, IT departments
Keypoints :
- Separation of duties between IT and cybersecurity can hinder collaboration.
- Cybersecurity teams must work informally with IT as they lack formal authority.
- Gaining support from leadership is critical for aligning cybersecurity initiatives with organizational goals.
- Understanding team workloads can influence the timing of security-related initiatives.
- Working with the most accommodating teams first can ease implementation challenges.
- Being prepared with necessary information enhances collaboration effectiveness.
- Visibility of cybersecurity efforts can increase awareness and collaboration opportunities.
- Soft skills are essential in fostering good working relationships and achieving cybersecurity goals.
MITRE Techniques :
- TA0024: Lack of Incident Response Capability – Improper reliance on IT without formal authority can lead to vulnerabilities.
- TA0040: Use of Soft-Skills for Influence – Leveraging relationships and communication effectively to gain support.
Indicator of Compromise :
- Vulnerability Reference: CVE-2021–44228
- Asset Identifier: US-JavaApp01
- Required Version: Apache Log4j2 version 2.12.2 or higher
- Current Version: Apache Log4j2 version 2.12.1
Views: 4
简体中文
Nederlands
Français
Bahasa Indonesia
日本語
Português