Profiles in Leadership: Robert HellwigUniversity of Siegen CISO Offers Strategies for Securing Open Environments
Control is the lifeblood of an effective information security program, but fully locking down all endpoints typically remains impossible, because of the detrimental impact it would have on usability, says infrastructure and information security veteran Robert Hellwig.
The control challenges are even more acute in the open environment of a public university, however, such as Germany's University of Siegen, where Hellwig serves as CISO. Accordingly, safeguarding personally identifiable information, research data and other sensitive resources and systems demands extra reliance on innovative approaches, he says. And that is true "especially on the student side, which is less controllable," meaning that "the challenge is even greater" for security teams.
In an interview with Information Security Media Group as part of the CyberEdBoard's ongoing Profiles in Leadership series, Hellwig discusses:
- Security, privacy and data protection challenges specific to working in more open environments;
- Balancing technology approaches with user awareness and outsourcing;
- The need to differentiate between security strategy and control versus operations.
Hellwig is an expert in organizational resilience, information security, data privacy and business continuity. He is a certified PECB ISO/IEC 27001 senior lead auditor and has worked in the security field for more than 35 years. He now serves as the CISO of the University of Siegen in Germany and is the managing director of a German consulting firm.
CyberEdBoard is ISMG's premier members-only community of senior-most executives and thought leaders in the fields of security, risk, privacy and IT. CyberEdBoard provides executives with a powerful, peer-driven collaborative ecosystem, private meetings and a library of resources to address complex challenges shared by thousands of CISOs and senior security leaders located in 65 different countries worldwide.
Join the Community - CyberEdBoard.io.