Every CISO’s First 90 Days on the Job
summary
Use a 30-60-90 plan and the MAP (measure assess plan) loop to inventory assets, run gap assessments, and produce a board‑blessed protection roadmap; track nine priorities (tone from the top, GRC, automation, employee ownership, etc.), justify tech every 18 months, train teams five days every quarter, and expect AI baselining to take 9–12 months. Adopt frameworks like NIST/ISO, note CISSP appears on ~68% of CISO CVs, prefer Go for log tooling over Python in some forensics use cases, and scan small network segments daily while you test backups daily.
AI-written summary · about
chapters (12)
- 0:00CISO role intro
- 1:0930-60-90 day plans
- 4:37Types of CISOs
- 9:12Assessing security posture
- 13:24Modern cybersecurity complexity
- 20:50Log aggregation & threat hunting
- 26:04Communicating with boards
- 31:57Security frameworks
- 39:37Certifications & learning
- 47:18CISO roadmap pillars
- 54:20Measuring CISO effectiveness
- 1:00:38Final thoughts & Q&A
related talks
40mCISO Leadership: Building Your Personal Action Plan
48mFirst 90 Days In the CISO Chair: A Practitioner's Perspective
46mNow You’re in Role: The Fearless CISO
42mCISO Panel
28mThe New CISO: What Got You Here, Won’t Get You There
53mOpen for Business: How to Build a Security Program as the First CISO
40mWhoa, You’ve Been the CISO for 3 Years at Your Firm—Now What?
11mCreate a Ten-Year Strategy for Your CISO