CISO

What Changes When You’ve Been a CISO More Than Once?

By / Blog / , ,

CISO Series highlights insights from a February 2026 Reddit AMA with seasoned CISOs discussing job transitions, board communication, and vendor relations. Key points include the need for CISOs to translate technical risks into business terms for effective board discussions, the importance of building relationships over sales, and recognizing that while fundamental skills carry over, specific playbooks must adapt to new contexts. A clear distinction between full-time and retained CISO roles was also emphasized, reflecting on the necessity of understanding organizational commitment to cybersecurity outcomes.

https://cisoseries.com/what-changes-when-youve-been-a-ciso-more-than-once/

Half of US CISOs Work the Equivalent of a Six-Day Week

By / Blog / , ,

US CISOs face rising pressure, working six or seven days weekly; 45% put in 11+ extra hours, 20% over 16 hours. Emotional exhaustion affects 44%, 56% of C-level feel the same. Despite stress, 94% would choose a cybersecurity career. AI exacerbates workload but shifts focus to business skills; 85% feel pressure to improve communication and interpersonal skills. Organizations must adapt to avoid governance gaps as AI changes operational dynamics.

https://www.infosecurity-magazine.com/news/half-us-cisos-work-equivalent/

We Gave the CISO Risk and Liability, and Now They Want Authority. The Nerve.

By / Blog / , ,

CISO roles face responsibility without authority, causing tension. Accountability exists but not equivalent decision-making power. Discussions include CISOs as risk advisors, the persistence of outdated security practices, and redefining employees from weakest links to strong allies. Experts stress the importance of adapting to new cybersecurity landscapes, emphasizing communication's role in enhancing security culture. Additionally, participants debate the severity of security breaches in public utilities versus logistics, ultimately favoring water supply threats as more impactful due to health implications.

https://cisoseries.com/we-gave-the-ciso-risk-and-liability-and-now-they-want-authority-the-nerve/

When We See White Smoke, We Know We Have a New CISO

By / Blog / , ,

CISO Series highlights cybersecurity leadership and relationships. David Spark and Andy Ellis host, featuring Russ Ayres discussing effective communication of security metrics to the board, emphasizing storytelling over mere numbers. The episode explores AI's potential impact on cybersecurity roles, advocating for a balance of specialists and generalists. The show discusses the cyclical nature of point solutions and platform integration in security tools, concluding with a segment comparing deepfake attacks and zero-day exploits, leaning towards zero-days being worse due to accountability.

https://cisoseries.com/when-we-see-white-smoke-we-know-we-have-a-new-ciso/

69% of CISOs Open to Career Move — Including Leaving Role Entirely

By / Blog / ,

69% of CISOs are considering job changes due to overwhelming responsibilities, lack of authority, and exhaustion, leading some to consider leaving cybersecurity altogether. The role is increasingly seen as unsustainable without proper support, compensation, and influence in decision-making. This talent exodus is driven by systemic failures in role design, with CISOs often having high responsibility but inadequate power, causing many to seek alternative career paths. Addressing these issues requires restructuring the role to enhance authority and support for CISOs.

https://www.csoonline.com/article/4127704/69-of-cisos-open-to-career-move-including-leaving-role-entirely.html

Should I Stay or Should I Go?

By / Blog / , ,

CSOs often face challenges that lead to job dissatisfaction and frequent turnover in leadership roles due to lack of support, resources, and executive engagement. Red flags indicating it's time to leave include leadership paying “lip service” to cybersecurity, cognitive disconnect between executives and CISO on risk management, and pressure to compromise ethics. Conversely, indicators of a healthy work environment include strong support from leadership and alignment on risk management. CISOs may transition into fractional roles to mitigate these issues and engage with organizations where they can influence positive change.

https://www.csoonline.com/article/4125356/should-i-stay-or-should-i-go-2.html

CISO Hot Chair. Personal Responsibility in the Age of NIS2

By / Blog / , ,

The role of the Chief Information Security Officer (CISO) is evolving from a technical advisor to a key business strategist due to new EU regulations like NIS2 and DORA. These regulations redefine due diligence, shifting responsibility from IT departments to governing bodies and making CISOs liable for compliance. This shift necessitates CISOs to be directly involved in decision-making, requiring them to balance technical expertise with legal and ethical insights.

https://brandsit.pl/en/ciso-hot-chair-personal-responsibility-in-the-age-of-nis2-when-digital-risk-becomes-private/

The Value Of The Virtual CISO In Today’s Threat Landscape

By / Blog / ,

The virtual CISO (vCISO) model is emerging as a practical solution for small and mid-sized businesses that cannot afford a full-time CISO. vCISOs provide executive-level security strategy and leadership on a fractional basis, helping organizations prioritize controls and improve security posture. Managed service providers (MSPs) and AI can further enhance the vCISO model by scaling security strategy and automating best practices.

https://www.forbes.com/sites/tonybradley/2026/01/20/the-value-of-the-virtual-ciso-in-todays-threat-landscape/

CISOs Are Becoming Ever More Powerful at Work

By / Blog / ,

CISOs' roles are expanding, with 52% noting increased responsibilities and 47% at executive levels by 2025. Many face challenges, including manageability issues and understaffing, particularly in non-tech sectors. Collaboration with other C-suite leaders is common, but a significant percentage assert roles are no longer sustainable.

https://www.techradar.com/pro/cisos-are-becoming-ever-more-powerful-at-work-even-more-than-other-c-level-execs

Security Leaders Join the Executive Suite as CISOs

By / Blog / ,

The rise of Chief Information Security Officers (CISOs) reflects an increased focus on cybersecurity amid growing regulatory pressures and threats, as executive-level titles afford greater influence within organizations. However, CISOs also face significant burnout and resource challenges, especially in smaller businesses, underscoring the complexity of their role amidst evolving cybersecurity landscapes.

https://www.darkreading.com/cybersecurity-operations/cisos-rise-to-prominence-security-leaders-join-the-executive-suite

Scroll to Top