Meet The Boss: Tom Doughty, Prudential

Tom Doughty, Meettheboss.tv

Security is a vital concern for all businesses and the decisions, actions and processes of employees at every single level of a company can have a profound impact on the success or failure of the security measures being used and deployed.

Within businesses there are a variety of risk holders and the individual choices they make can have either positive or negative effects on the business as a whole. However, according to Tom Doughty, CISO of Prudential, a proficient security system is ensured by a framework in which employees are all able to make informed residual risk decisions.

In an exclusive interview with Meettheboss.tv, Tom Doughty spoke about his beliefs and approaches to security and the ways in which he has managed to implement these.

Doughty explained how stakeholders throughout an organization have an impact on security and the information, options and framework they have access to will strongly influence the risk decisions they go on to make.

"Tools and technology cannot create a culture", Doughty told Meet the Boss. "They can leverage a culture, but at the end of the day people have access to information; people are controlling processes, modulating processes and people make decisions".

Social media is one area that clearly highlights the dichotomy between expanding communication, interaction and information within business whilst also maintaining a safe and secure workplace. Doughty explained that this is something Prudential has embraced whilst conceding that social media has also "increased the surface area for untoward things to happen."

Doughty sees his role as perhaps one of informer, describing how his approach can filter down throughout Prudential: "if the risk owner makes the technology risk decision in the business with their eyes wide open, whether it's one that I thought would have been the right decision to begin with or not, I've begun the process correctly. And uninformed risk decision is vastly worse compared to an informed residual risk decision."

By crediting stakeholders with the ability to make informed decisions, the overall security of the company can be maintained and the business can continue to develop and expand.

For the full interview with Tom Doughty, visit Meet the Boss TV

Relevant articles:

Interview with Nick Ogden, CEO of Voice Commerce | AMD: The changing face of advertising? | Are you savvy over online security?

Like this article? Get the RSS feed: