Managing Risk and Information Security: Protect to Enable

Foreword

Newly promoted CISOs rapidly realize that the scope of the position they have taken on is often beyond what they have been prepared for. The nature of securing an enterprise is daunting and overwhelming. There are no simple checklists or roadmaps for success. Many of the technical security skills a CISO has acquired during the early portion of his or her career may provide a “sixth sense” or intuition, but technical expertise alone does not prepare the CISO for the business and leadership challenges required for success.

The Dunning-Kruger effect “is a cognitive bias in which unskilled individuals suffer from illusory superiority, mistakenly rating their ability much higher than average” (Wikipedia). Successful CISOs generally realize ...