Maureen Allison, former CISO at Johnson & Johnson, distilled cybersecurity readiness into three questions: What are your assets? Where do they reside? Who has access to them? Most organizations can't answer all three.
One of my mentors, she's phenomenal. She was a former CISO at Johnson Johnson for a long time. Maureen Allison, I'll call her out, give her some love here. Maureen's been phenomenal to help me in my career. But she says 3 questions that I always use that you can ask companies that are not even technical questions. When they say, where do I start? What are your assets? Where do they reside? And who has access to them? 3 questions you can ask right there. Not technical, not difficult. And if you can answer those questions in completeness, then you're in good shape. Most folks can't.
