Interview with HP CISO Rich Armour

[#1]

When HP hosted the CISO Roundtable in New York a few weeks ago I let the Twitter community know that I would be interviewing HP's CISO, Rich Armour - and that I welcomed questions you would like him to answer... the result was better than I could have expected.  We got fantastic questions, and Rich answered them all, without hesitation.  Top theme of the conversation included usable security from the CISO perspective...

The top questions asked and answered are:

1. How do you get away from "buzzward bingo" and actually start fixing and addressing security concerns of the enterprise?
2. How do you get away from playing security "Whack-a-mole"?
3. Does the CISO need "tech skills" and how sharp are yours?
4. How do you get from simply "maintaining security" to helping the organization/enterprise innovate?
5. What 1 [security] technology has run its course?
6. How does the HP CISO's organization practice what the HP Enterprise Security business preaches?

Check out the whole interview right here ... I would like to thank Rich on behalf of all of those who had their questions answered, and I can't wait to do it again!

Do you have comments for this video?  Would you like to ask Rich additional questions?  Post it below, and don't forget to leave your Twitter handle!

[#2]

Raf,

Would love to understand how far HP is from integrating security infrastructure events with operational events?  When HP acquired ArcSight it was said that, "Integrating ArcSight’s security portfolio with HP’s IT operations management portfolio will allow organizations to converge millions of events across IT operations and security, providing deeper context than either platform alone."

All i have heard HP mention, and i am a huge fan, is ArcSight/Tipping Point / Fortify... what about the above statement?

Thanks,

Information Security is @notjust4squares