The challenges of a CISO are tough. Goals seem unachievable, the board and rest of the organization seem negligent. The same feeling also counts for the organization, where should you start and how can you comply to everything?
To overcome these challenges, the focus should be on the road towards the endgame; with a clear compelling end state in mind, with tangible targets that the organization can rely to. A CISO needs to sense the organization, be flexible, capable of prioritizing and connected to the pace of the organization. Typical CISO biases need to be overcome.
Where today’s CISO puts focus on policy and compliance, the CISO of tomorrow puts emphasis and support on how things should get done instead of what should be done.
