The New CISO: What Got You Here, Won’t Get You There
summary
Claims that the CISO role must shift from technologist to business enabler, with concrete steps: set recurring business leader meetings to learn one vertical, deliver quick enablement projects, and replace attack counts with translate security metrics to cost avoidance (incidents × average cost saved). Use those business KPIs to get budget, then run a six-month review cycle to adjust architecture and policies. Start small, show measurable revenue-protection value, and iterate toward an 18–24 month architecture plan.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:25How most of us got our jobs
- 3:45How we see ourselves
- 4:47How we work
- 6:00How we think
- 10:10Approach this from a business
- 18:40Going forward
- 22:40Change your mindset
related talks
08mThree Keys to CISO Success
39mSo you wanna be a CISO … Are you sure?
46mNow You’re in Role: The Fearless CISO
47mThe Evolving Role of the CISO and the Security Organization
42mCISO Panel
40mCISO Leadership: Building Your Personal Action Plan
25mDigital Transformation and the New Role CISOs Need to Play
49mState of the CISO 2024: Doing More With Less