Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Building your IT security team

At the CSO Perspectives conference, security execs outlined their process for hiring, promoting, and training employees to maintain a desired level of corporate protection


Good help is hard to find, and in the world of IT security, there's little question that finding the right people to defend your operations and corporate reputation is a cornerstone to achieving success.

Getting the necessary mix of security professionals together and finding the right way to keep them onboard and focused on your organizations' top priorities is no easy task, experts said, and demands year-round attention.

Speaking at the ongoing CSO Perspectives conference in Atlanta, leading security executives outlined their process for hiring, promoting, and training employees to maintain a desired level of corporate protection.

To find the type of people that you really want on your security workforce, one of the first things to remember is that a pile of certifications isn't necessarily as important as finding employees who will best fit in with your organizational culture, said Lynda Fleury, chief information security officer at Unum, a provider of corporate benefits programs.

"To me, attitude has more weight than skill. You can train people on security, network administration, and monitoring; expertise and knowledge is important, but a winning attitude and the ability to gel with staff and your corporate culture are key," Fleury said. "You want people who speak about 'we', not 'I', because in my experience there is never a single hero in IT security. If something is wrong, there is more than one person to blame, and no one individual is responsible for the team's success."

In addition to making sure that candidates are truthful in representing their skills by putting potential new hires through batteries of mock tests and running all the necessary background checks, once you've decided to bring someone onboard, it's also vital to first introduce them to line of business workers with whom they might interact.

One of Fleury's larger keys to success is aligning her team with overarching business objectives and getting people involved in company efforts that will impact IT security as early as possible, she said.

By introducing security job candidates to the business executives they will support in their respective roles, its easier to identify potential conflicts and ensure that you're getting the right person to step into the position, Fleury said.

Once hired, it's vital to continue to provide opportunities for workers to increase their value and advance their careers by making sure that they have access to additional training and graduate programs, said the Unum executive, who currently manages a staff of 28 security pros.

Matt Hines is a senior writer at InfoWorld.
Continued
1 | 2 | NEXT PAGE » 


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Beyond AntiVirus: Symantec Endpoint Protection
Today's threats to the endpoint are much more dangerous as they rapidly evolve to evade traditional security measures. To combat these threats, companies should supplement existing security with proactive behavioral based technologies. Join this webcast to learn about Symantec's next generation AntiVirus solution that provides that level of protection. Sponsor: Symantec

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist