CISOs Must Evolve or Be Sidelined
Authority isn’t handed out in the boardroom. It’s earned by those who understand the business and lead from within. There is a narrative around…
Debunking Three Cliches Deeply Entrenched in the Cybersecurity Industry Echo Chamber
I have been writing about cybersecurity leadership, management and governance issues since 2015. What drove me to writing, was primarily the dramatically low level of…
Still Fighting the Wrong Fight? The CISO Paradox in 2025
Why Most CISOs Still Miss the Point—and What Needs to Change The CISO Report 2025 from Splunk has received widespread comments from online cybersecurity media.…
Don’t Expect Cybersecurity to Work in Firms where Nothing Does
You cannot expect the CISO on their own, bottom-up, to reverse widespread business dynamics, where short-termism prevails everywhere across the business. I have written at…
Talent and Governance, not Technology, are Key to Drive Change around Cyber Security
You Are Not Going to Fix Your Cyber Security Problems by Buying More Tech For the last 20 years, large organizations have been spending significant…
Resilience doesn’t just happen
Resilience isn’t something you can just go out and buy. Sure, you can procure a service-level agreement with a specific provider for a specific…
Turning the Tables on Cyber Security Budgets
Time to move away from bottom-up dynamics: The Board should decide on priorities and drive the discussion As we hit budget time again in many…
Cyber asset attack surface management (CAASM)
July 14, 2021, marked the advent of a new term: Cyber asset attack surface management (CAASM). Gartner announced its arrival in the Hype Cycle for…
The EASY Framework for Your Threat Intelligence Program
In all of my years working in cybersecurity, I never thought I’d create my own framework — let alone one for threat intelligence programs. Why? Because…
Cyber Security Automation is Key to Fight the Skills Gap
To start building solutions to the skills gap problem, it is key to look at it in all its dimensions. The debate around the cyber…
Cyber Security and the Culture of Alienation
The COVID crisis is presenting most organisations with unprecedented situations, but it does not make cyber security less of a priority. On the contra…
Post-COVID Outlook for Cyber Security: New Normal … Looking a Lot like the Old
Two recent reports highlight the current cyber security paradox: While the COVID pandemic has turned business and society upside down, well-establishe…