19TECH OUTLOOKMay-June, 2017the weaknesses, the resources needed, and ensure appropriate attention is paid to all areas across the organization. For example, technology is not only managed by the CIOs/CISOs now. At least 30-50percent of a technology portfolio is now managed in business operations and is not under a CIO/CISO's purview. It may be an end user application which started on Excel, moved to Access and is now stored on a server under a desk somewhere or even in the data center, but IT doesn't know what it runs, how it runs or how it was developed. The cybersecurity roadmap must address the ancillary technology tools, third party vendor tools, and enterprise systems holistically. The CIOs/CISOs are in the perfect position to go engage with stakeholders or vendors and understand vulnerabilities and safeguards, then update the roadmap and provide an assessment report. To achieve a strong disposition toward cybersecurity requires multiple roles and stakeholders working together to identify vulnerabilities, prioritize and plan the steps needed to make everything secure.Investing in talented IT professionals is a broader issue. At McKesson, challenges focus primarily on two areas ­ bringing in new professionals to ensure we are continuously refreshing the talent pool with the most up-to-date skills, and energizing our current talent pool to ensure the skills of our core workforce don't become stale and reduce resistance to change. Efforts are made to attract the younger, more junior professionals and spark their interest in working with McKesson and with the longer-term employees; they are proactively moved into new roles rather than allowed to continue in the same role indefinitely. The movement helps energize the tenured workforce and facilitate continuous learning. McKesson also provides opportunities for growth through collaborations with colleges who provide programs and opportunities to train in new technologies.The best way to address the trends over the next five years is to consider cybersecurity from a holistic perspective and to consider how a solution fits into the enterprise value chain end-to-end. Currently, there are many point solutions and there are many piecemeal approaches, but new thinking suggests addressing the people and process side of the cybersecurity equation and the dangers of social engineering. It's only a matter of time before innovation will create something where large organizations can address their vulnerability fairly easily. The best way to address the trends over the next five years is to consider cybersecurity from a holistic perspective and to consider how a solution fits into the enterprise value chain end-to-end
< Page 9 | Page 11 >