Intelligent CISO Issue 19 | Page 16

latest intelligence 90 DAYS - A CISO’S JOURNEY TO IMPACT: DEFINE YOUR ROLE “I PRESENTED BY DOWNLOAD WHITEPAPERS AT: WWW.INTELLIGENTCISO.COM/ WHITEPAPERS 16 have a whole set of hacking books and hacking movies and me and my buddies get together all the time and say our stories are way better,” says Pete Nicoletti, Chief Data Officer at Cybraics and former CISO at Hertz. “I made a service where we would go way beyond the vulnerability scan or pen test; We would actually physically break into a building and then, from the site, typically break into the network and show you where you’re vulnerable - so not only your physical security systems but also your network and internet facing security system. “We would write very comprehensive reports; we were 100 percent successful in breaking into buildings and acquiring crown jewel information. We did banks; we did very large companies. I've come in through skylights, as well as walking behind people in turnstiles… you name it. I've invented lockpicks to break certain types of locks that there wasn't a lock pick for. Pretty crazy stuff.” Few CISOs can draw on a background as colorful as Mr. Nicoletti’s. Though the cybersecurity world can seem like a Hollywood script at times, when it concerns state-sponsored espionage or gangsters running drug empires through the ‘dark web’, most of the day- to-day is about patching vulnerabilities, painstakingly seeking out security gaps and reiterating the same basic security advice to your colleagues. The target is perfection, even if perfection can never actually be achieved. u Issue 19 | www.intelligentciso.com