Profiles in Leadership: Wouter Veugelen of Oil Search LtdCybersecurity Enables Business While Managing Risk
It's often noted that some view cybersecurity as putting the brakes on business. But it's actually the opposite, says Wouter Veugelen, CISO of Oil Search Ltd.
"Cybersecurity provides the guard rails for the business to be able to operate within, and that means if business stakeholders operate outside of those guard rails, we obviously need to make them aware of that," Veugelen says.
An analogy in the physical world are brakes on racing cars. The brakes actually enable the racing car to go faster; cybersecurity controls do the same for the business, he says.
Risk ownership is a key part of enterprise cybersecurity. Veugelen says some organizations do have mature risk management functions, and those organizations are used to having risk ownership discussions, Veugelen says. In less mature organizations, further education may be required around accountability and responsibility.
In this video interview with Information Security Media Group as part of CyberEdBoard's ongoing Profiles in Leadership series, Veugelen discusses:
- How to promote security as an business enabler;
- How to cope with challenges around risk ownership;
- How operational technology security is evolving and improving.
Veugelen is CISO for Oil Search Ltd., which is a global oil and gas exploration and development company. Veugelen was previously CISO for Healius Ltd., an Australian health care organization. He's also held director-level and senior management positions at PwC and EY.