Jay Leek, Senior Vice President and Chief Information Security Officer at The Blackstone Group, discussed information security and its importance for today's organizations during his presentation at the 2015 CISO Leadership Forum in New York on April 15. In his presentation, Leek noted that utilizing information security tools can help an organization minimize risk and protect its sensitive information at all times.
Leek pointed out that eliminating information security risks requires an organization to understand these issues. However, a simple approach to information security is important, Leek said, because it enables an organization to build a security-focused culture: "Ultimately, if we don’t build the culture that scales, if we don’t build an information risk and security oriented culture within our organization, we're never going to be successful at really moving the needle."
An organization should hold its employees accountable, particularly when it comes to information security Leek said. Also, Leek said an organization should incorporate information security into its mission to ensure that each employee understands what it takes to minimize such issues. In addition, Leek noted that an entrepreneurial approach to information security is key because it enables an organization to look for outside-the-box solutions to various problems: "Risk obviously an entrepreneurial mindset, at least that’s the mindset of Blackstone is really well accepted and therefore we should think about what risks are appropriate to take for the firm that’s going to allow the firm to rally around something that’s a little different."