May 3, 2022Cyber Buzzwords and why some should change!I decided to address buzzwords in the same spirit of collaboration as my previous article, CISO Manifesto: Rules for Vendors — 2022 Edition. If you have worked in the cybersecurity field for the last decade, you know about buzzwords; those adjectives Marketing and Sales swear will bring in revenue. …Cybersecurity9 min readCybersecurity9 min read
Apr 15, 2022CISO Manifesto: Rules for vendors — 2022 EditionIn 2017 I wrote an article titled “10 Rules for Vendors” that had been requested by fellow CISOs and Security Professionals. Since then, I have updated it multiple times and usually release it to the community for comment before starting the security conference season. …Cybersecurity11 min readCybersecurity11 min read
Apr 1, 2022Life Lessons Learned from a career in CyberRecently, a close friend and fellow security executive asked me to think about some life lessons I could pass on to peers in our community who were stepping into their first cyber leadership roles. After much thought, I realized she had a good point; much of the knowledge and experience…Life Lessons14 min readLife Lessons14 min read
Aug 10, 2021Developing Your 60–90 Day Strategic Security PlanAs a security professional, I have worked in numerous business verticals in both the private industry and the federal government. I have led teams supporting thousands of employees in offices worldwide, and I have led teams supporting just a couple hundred employees in offices locally here in the United States…Cybersecurity14 min readCybersecurity14 min read
Aug 10, 2021A CISO looking back, “Dear younger me…”Recently one beautiful night here in San Diego at a concert with my wife of thirty years I listened to MercyMe play a song, “Dear Younger Me.” As I listened to the music, I found myself reflecting on decisions I had made over the last twenty years in my career…Cybersecurity6 min readCybersecurity6 min read
Aug 10, 2021So You Want to Hire a CISO?As my smartphone rings on my desk, I pick it up and find it’s another recruiter who has a story to tell me. They have this client who has a fantastic opportunity for the right candidate. Now I am sure many of my fellow peers have heard this story, it’s…Cybersecurity8 min readCybersecurity8 min read
Feb 19, 2021What CEO’s should know about the CISO role and its Security Program?In previous articles, I have discussed the changing roles of the modern CISO and how the new job requirements of the CISO and their security teams are focused on providing risk management services to their organizations. Part of these earlier discussions with our community has focused on the threats facing…Cybersecurity6 min readCybersecurity6 min read
Feb 19, 2021Challenges That Cause CISOs to FailHaving spent the last 12 years as a CISO in multiple roles, I sometimes think I have seen everything that could stop my security program from being successful. Then along comes yet another squirrel to prove me wrong. I could use a more colorful adjective, but I think we all…Cybersecurity10 min readCybersecurity10 min read
Feb 19, 2021So you want to be a CISO, an approach for successI have been writing and speaking about the role of the Chief Information Security Officer (CISO) for the last several years, and as I have continually acknowledged, the job is not for the faint of heart. The role at times can be brutal and stressful taking a toll on its…Cybersecurity10 min readCybersecurity10 min read
Sep 7, 2020Universal Aspects of the Evolving CISO RoleCurrently, many of us security professionals are sheltered in place working from home, managing our security teams remotely as we help our organizations find their path forward in the new world COVID-19 has created. During this day-to-day grind, over the last eight weeks, I found time to discuss with peers…Cybersecurity5 min readCybersecurity5 min read
