Ever dreamt of becoming a CISO? Before grabbing the reins, consider the motivations. Titles and fat checks are tempting, but the reality is demanding, stressful, and requires more than tech mastery. The right reasons? Leadership, protecting critical assets, building high-performing teams, and shaping a security-aware culture. The best part? Collaborating with an amazing security community. But...
Down the security rabbit hole: How to Win Friends and Influence CISOs
Have you noticed that the relationship between buyer and seller, or more precisely, between CISO and seller is… eh … tenuous lately? OK, maybe it’s a lot worse than that in some cases. Why is that? How did we get here? And how do we fix a relationship that is quite clearly necessary, but just so broken? Rafal and I went down the security rabbit hole to discuss the challenges and...
Defense in Depth podcast: When Vendors Pounce on New CISOs
In this episode of Defense In Depth podcast, David Spark, Allan Alford and I discussed: A security professional announces a new position as CISO. As a vendor you see this as good timing to try a cold outreach to sell your product. Why do so many vendors think this is a good tactic, when in reality it’s exactly what you should not do? and It all started because of this post I shared on LinkedIn
WSJ Pro cybersecurity: scoring board
Successful chief information security officers are effective at getting their message across to the board. In this session I joined Rob Sloan , WSJ Research Director, and Tim Rohrbaugh, CISO at JetBlue, where we presented to a board member and have Dr. Anastassia Lauterbach critique our efforts. It was a fun conversation.