#AfrSS2017: Catherine Muraga on challenges CIOs face when it comes to identifying IT Security vendors

“Not all CIOs have an IT Security background, we come from all manner of of IT related backgrounds like programing, project management and others even from business. So we all face different challenges.”

This was said by Catherine Muraga, Director IT and Operations at Sidian Bank during the The Africa Security Summit  organized by CIO East Africa and held in Nairobi Kenya.

The two day event seeks to help C-level executives on the continent better understand the true threats and what is required to address them and how effective, efficient solutions deliver competitive advantages.

“From the challenge of being able to translate Information Security risks and solutions into layman speak to negotiating budgets with the Directors,” she added.

Here are some of the challenges CIOs face when it comes to identifying IT Security Vendors.

Solutions and not boxes

Often times we probably have a target and we get it. But is the solution you are pushing have any purpose to your organization. Have you done a research to know what exactly your organization needs? Food for thought. CIOs should always engage on what is appropriate and Fit for Purpose

One size does not fit all

Ms Muraga, gave an example of the banking sector stating that what would work for a tier 1 bank, will not always work for a tier 3 bank. “Vendors should take your time to understand how investment decisions are made from a local entity to an international entity,” she added.

Product Knowledge`and lack of local expertise

“You have this great product and the delivery is also awesome but there are challenges of offering training on this product. The solution to this is to please deploy it and ensure the security level is high. Due to lack of local expertise, CIOs are forced to rely on vendors outside the country who tend to be pricey and may not always be available reachable for support,” added Ms. Muraga.

Sales vs Technical Teams

Ms. Muraga said, “A Sales person came and made a great pitch on what a product can do.  But the actual capabilities and the sales pitch are miles apart. The question always features, “what is the budget?” and it is debatable. But then the CFO came and made it clear that this is the IT Budget and you have to work with that budget.”

As a CIO always engage on what is Fit for Purpose by fitting a solution into the budget and not a solution to the organisation problem.

Grey areas

“There will always be grey areas but as a CIO all you need to do is choose what shade of grey you want to pick or leave especially when it comes to vendors pitching IT Security solutions to you,” concluded Ms. Muraga.