How Collaboration and Risk Governance Shape Security Strategy with Bill Dunnion

About this video

• Video Title: How Collaboration and Risk Governance Shape Security Strategy with Bill Dunnion
• Channel: Cyber Business Podcast
• Speakers: Matthew Connor, Bill Dunnion
• Duration: 00:42:27

Overview

This episode features a discussion with Bill Dunnion, CISO at Mitel and co-founder of the Canadian Cyber Forum. The conversation centers on the evolving role of CISOs, the importance of collaboration and community in cybersecurity, and how risk governance shapes security strategies. Dunnion shares insights into building resilient security teams, the development of the Canadian Cyber Forum, and his own career journey, emphasizing the shift towards a more business-centric approach to cybersecurity.

Key takeaways

• Canadian Cyber Forum Origins: The forum began as a small meetup group in Ottawa, driven by a need for a collaborative space for cybersecurity professionals to share knowledge and network, distinct from costly, sales-driven industry events.
• Community Building: The core purpose of the Canadian Cyber Forum is to foster a community where like-minded individuals can openly discuss what's working and what's not in cybersecurity, share job opportunities, and learn from each other.
• Collaboration is Key: The analogy of "bad guys talking" highlights the necessity for "good guys" to communicate and share information to effectively combat cyber threats.
• Evolving CISO Role: The CISO position is increasingly viewed as a business role rather than purely technical, requiring an understanding of business objectives to enable secure growth rather than simply acting as a "department of no."
• Mitel's Chapter 11: Mitel successfully navigated a Chapter 11 restructuring through a debt-to-equity conversion, emerging with a healthier balance sheet and maintaining profitability, demonstrating a strategic approach to financial challenges.
• Security as a Business Enabler: Effective cybersecurity should be framed not as a cost center, but as a business enabler that supports revenue generation, customer retention, and achieving business goals.
• Diverse CISO Paths: There is no single, typical path to becoming a CISO, with professionals coming from various backgrounds, highlighting the value of diverse experiences in leadership roles.