Stay updated on CISO news and insights. Expert coverage on Chief Information Security Officer roles, strategies, and cybersecurity leadership trends.
Search across headline titles and summaries.
Background for this topic.
CISO is the senior executive responsible for an organization’s information security strategy and governance. This role involves overseeing risk assessments, security architecture, and policy enforcement to protect sensitive data and critical systems. The CISO coordinates between technical teams and business units to ensure security measures align with organizational priorities and regulatory requirements.
In practice, the CISO must manage risks from insider threats, supply chain vulnerabilities, and targeted cyberattacks by prioritizing security controls and monitoring emerging threats. Their decisions influence how effectively an organization detects and responds to incidents, maintains secure configurations, and integrates security into business processes. Effective CISOs balance technical expertise with strategic oversight to reduce exposure across diverse attack surfaces.
Enterprises are increasingly recognizing that the CISO's skills and experience building risk-based cyber programs translate well to other C-suite positions.
Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, to the table.
Our brand-new podcast, Dark Reading Confidential, has officially launched. You don't want to miss our first episode with the CISO and chief legal officer from Reddit and a cybersecurity attorney, who share their thoughts and advice for CISOs on the new SEC breach disclosure rules.
The research shows a significant drop in the number of tech CISOs that got a base salary increase in the past year — roughly 18% year-over-year.
A panel of former CISOs will lead the closing session of this week's RSA Conference to discuss challenges and opportunities.
A panel of former CISOs will lead the closing session of this week's RSA Conference to discuss challenges and opportunities.
Large language models promise to enhance secure software development life cycles, but there are unintended risks as well, CISO warns at RSAC.