Top 3 Traits for CISOs in the New Era of Cybersecurity
Resilience under pressure, trust built through communication, and a forward-looking read on technology, drawn from leading recovery after a nation-state attack.
Read the piece →Our thinking
Things to consider.
What we've concluded from doing this work, and the reasoning behind it. New pieces are cross-posted to LinkedIn. Follow along there, or subscribe by RSS.
What we believe
Four things we keep coming back to.
Simplification beats accumulation
There are over 5,000 security products on the market and the answer is almost never another one. Fewer, better-integrated controls that your people actually operate will out-perform a larger stack nobody has time to tune.
AI is a defender's problem and a defender's tool
Your organization is already running AI, whether or not anyone approved it. Governing that is urgent. So is using it. Defenders who wait for the perfect model will spend the next two years being out-paced by attackers who didn't.
Fear-based selling is a failure of explanation
If a security investment can only be justified by describing a catastrophe, the case hasn't been made. Risk framed in financial, operational and reputational terms lets a board decide like adults.
The measure of advisory work is what you can do after we leave
A two-hundred-page assessment only its author can interpret creates dependency, not capability. Good work transfers judgement, not just deliverables.
Articles
In depth.
Why Small and Mid-Sized Businesses Need a Fractional CISO
Financial, reputational, legal and operational exposure, and how part-time executive security leadership closes the gap without a full-time salary.
Read the piece →Let's talk
Reading is good. Doing is better.
If one of these hit close to home, that's usually a sign it's worth a conversation.