Whoa, You’ve Been the CISO for 3 Years at Your Firm—Now What?
summary
Defines a clear three-year flex inflection where a CISO assesses program impact, partnerships and influence, then chooses to keep at it / slow down / accelerate for the next 1–3 years. Cites concrete wins: early single sign-on deployment, later identity governance projects, succession planning, open-sourcing playbooks and playbooks as deliverables, plus downloadable framework and mind map. Warns of change fatigue and burnout, recommends measuring targets, timing (e.g., 6–12 months for accelerate), and honest checks of personal energy and company signals.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:08CISO Inflection Points
- 3:15Signs that you're at the 3-year flex.
- 6:10of 4): Recognize your 3-year flex.
- 7:36What kind of CISO have you become?
- 10:40What are you "feeling" you want now?
- 12:29When you stay, there are 3 options...
- 14:28Consider the security program
- 16:06Consider yourself as a leader
- 17:26Consider the company more broadly
- 18:53of 4): Don't skip reflection.
- 27:53Accelerate.
- 29:54Accelerate, but do it well.
- 31:33of 4): No matter your choice, do it well.
- 34:29The CISO 3-year flex
- 37:12of 4): Download the take-aways from this presentation.
related talks
01h 03mEvery CISO’s First 90 Days on the Job
49mFrom Aspiring to Achieving: CISO Journeys Unveiled
28mThe New CISO: What Got You Here, Won’t Get You There
42mCISO Panel
40mCISO Leadership: Building Your Personal Action Plan
46mNow You’re in Role: The Fearless CISO
11mCreate a Ten-Year Strategy for Your CISO
39mSo you wanna be a CISO … Are you sure?