Tag
11 posts
The transition from CISO to CIO involves expanding the focus from solely protecting assets to enabling business opportunities while maintaining security. Successful CIOs balance risk management with strategic business partnership, addressing both security and organizational growth.
True success and competitive advantage come from deep commitment rather than constant chasing of trends or outcomes. It draws on Stoic philosophy, advocating for focus on effort and mastery in one's current role, leading to clarity and autonomy.
CISOs face critical governance questions regarding accountability for breaches caused by AI agents, as organizations haven't established adequate oversight structures to manage these risks. With the rapid deployment of autonomous AI systems, it's essential for boards to address emerging challenges, including identifying all AI agents in use, to enhance governance and security in this high-stakes environment.
The author reflects on their experience leading through a simultaneous cybersecurity crisis and a family emergency, illustrating how true leadership is about consistent, small decisions rather than drawing from hidden reserves of strength. Key insights include the importance of consciously choosing composure and the necessity of ruthless prioritization in high-pressure situations.
47% of CISOs now carry executive-level titles. 41% of boards address cyber issues monthly. The seat at the table is being offered. But sitting at the table and being heard are two different things. The difference is translation — connecting every security metric to revenue protected, customers retained, or regulatory penalties avoided.
94% of CIOs expect major changes to their plans within 24 months, yet fewer than half of digital initiatives hit their targets. That gap isn't a technology problem — it's a leadership problem. Adaptive leaders treat plans as hypotheses, decentralise decision-making, and build organisations that adjust when reality intervenes. In 2026, that capability is no longer optional.
Compromise has a cost we rarely calculate. The slow normalisation of lowered standards is the most dangerous leadership failure — precisely because it looks like flexibility.
A practical guide to 12 cognitive biases that distort leadership decisions — from loss aversion to the paradox of choice.
The CISO role has fundamentally changed. Technical credentials remain table stakes — but in 2026, the most influential security leaders are those who build security culture, not just security architecture.
AI agents are no longer a concept on a roadmap — they're running in real workflows now. The question isn't whether to deploy them. It's whether your leadership model is ready to govern them.
AI is extraordinary at handling the messy, repetitive work that once built judgment in junior practitioners. For senior leaders it's a genuine multiplier. For junior people the story is different — they're producing polished outputs while skipping the part where people actually learn. That gap won't show up in your productivity metrics. It will surface five years from now, in a leadership bench with portfolios but no instincts.