Discover the latest on compensation in infosec: trends, salary insights, and how it impacts retention and talent in the cybersecurity sector.
Search across headline titles and summaries.
Background for this topic.
Compensation in information security means implementing alternative controls when primary security measures cannot be applied or are insufficient. These compensating controls aim to reduce risk by providing a comparable level of protection, such as using enhanced monitoring or stricter access policies when a technical control like multi-factor authentication is unavailable. They are not permanent fixes but temporary or supplementary measures tailored to specific limitations.
Understanding compensation is critical because relying on weaker or indirect controls can introduce gaps exploitable by attackers if not carefully designed and maintained. Effective compensating controls must be regularly evaluated to ensure they address the exact vulnerabilities left open by missing or failing primary controls. This practice helps maintain security integrity and supports compliance with standards that require risk mitigation even when ideal controls cannot be deployed.
Weekly headline count for the current query.
The rate of compensation gains has slowed from the COVID years, and budgets remain largely static due to economic fears, but CISOs are increasingly gaining executive status and responsibilities.
After stealing sensitive data from Disney, Ryan Mitchell Kramer claimed to be part of a Russian hacktivist group protecting artists' rights and ensuring they receive fair compensation for their work.
Opportunistic threat actors targeted Portuguese and Spanish speakers by spoofing Portugal's national airline in a campaign offering compensation for delayed or disrupted flights.
CISOs' cash compensation tops $400,000 now, but with the high pay comes struggles, rapidly changing responsibilities, and tight budgets.
At least a portion of executive compensation going forward will be tied to meeting security goals and metrics.
Tens of thousands of workers are effected by a fellow employee dipping into files that include everything from SSNs and names to union status and compensation data.
This time, it's the law firm that got breached, then sued for what victims claim was inadequate protection and compensation for theft of personal data.
Ensuring stronger in-house defenses is integral to retaining customer loyalty.