Stay updated on CISO news and insights. Expert coverage on Chief Information Security Officer roles, strategies, and cybersecurity leadership trends.
Search across headline titles and summaries.
Background for this topic.
CISO is the senior executive responsible for an organization’s information security strategy and governance. This role involves overseeing risk assessments, security architecture, and policy enforcement to protect sensitive data and critical systems. The CISO coordinates between technical teams and business units to ensure security measures align with organizational priorities and regulatory requirements.
In practice, the CISO must manage risks from insider threats, supply chain vulnerabilities, and targeted cyberattacks by prioritizing security controls and monitoring emerging threats. Their decisions influence how effectively an organization detects and responds to incidents, maintains secure configurations, and integrates security into business processes. Effective CISOs balance technical expertise with strategic oversight to reduce exposure across diverse attack surfaces.
As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity expertise, if even on a part-time basis.
Healthcare organizations should prepare for post-quantum cryptography without overreacting to hype, said John Frushour, CISO of New York-Presbyterian Hospital. Stronger encryption standards, commercial software support and attention to medical devices can help providers manage emerging risks.
Your Controls Assume a Human Is Acting on the Data Being Accessed. But AI Isn't HumanAI is exposing a blind spot in enterprise security: Controls built for humans don't work on agents that never pause, filter or apply judgment. New CISO research shows many organizations can't track what AI is accessing - turning existing data gaps into machine-speed risk.
Bank of Ireland's Francis Gorman Shares Strategies for Successful Quantum MigrationMost organizations give the migration to quantum-safe cryptography to the CISO. But that puts a cross-business change in the wrong hands. Accountability belongs with senior leaders who can influence the whole enterprise, says Francis Gorman, head of Bank of Ireland's security center of excellence.
CISOs Discussed Governance, Security Operations and Cyber RiskFrom boardroom persuasion to AI-powered SOCs, ISMG's Cyber Resilience Summit Dallas gave senior security and risk leaders a playbook for the age of inevitable disruption, with sessions spanning zero trust, human risk reduction, threat preemption and governance as a foundation of resilience.
Executive leaders may not be saying it aloud, but business objectives and priorities don't always promote timely disclosures.
Employees are increasingly building automations, agents, and apps with AI tools outside traditional security oversight. Tines explores how CISOs are handling AI-driven code sprawl, shadow tooling, and governance challenges. [...]