U.S. Bank CISO says the security role keeps growing and no one can own all of it
U.S. Bank's CISO says the expanding security role requires partnerships, not one leader owning every risk.
Ann Barron-DiCamillo, CISO of U.S. Bank, told Help Net Security the CISO role now spans fraud, resilience, third-party risk, and AI governance. She argues no single leader can own it all and that partnerships across technology, risk, legal, and business matter more than expanded authority. She also discussed shorter incident-reporting deadlines, spending on risk reduction rather than compliance evidence, and sharing intelligence through FS-ISAC and FSSCC.
- CISO role now covers fraud, resilience, third parties, and AI governance.
- Shorter incident reports help sharing but strain early investigations.
- She favors automation and visibility over compliance-only spending.
- Banks should share intelligence via FS-ISAC while judging their own risk.
- Organizations
- U.S. BankFS-ISACFSSCCAmerican University
- Countries
- United States
From the original article
4 min read at helpnetsecurity.com
In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U. S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.