Being a Balanced CISO

Summary

In this video, the speaker discusses the importance of understanding the 'season' a company is in to provide maximum value as a CISO or in any leadership role. They explain how professionals often misjudge the business environment and offer strategies to navigate it successfully, including understanding both the needs and wants of those around you. Simple acts of service, like asking 'How can I help?' can build invaluable relationships and respect. The speaker emphasizes the power of applying basic principles to build trust and credibility, ultimately fostering positive outcomes for both individuals and organizations.

Takeaways

• 😀 Understanding the 'season' your business is in is crucial for a CISO to align their strategy with the company's current phase.
• 😀 A CISO should step back and analyze their company's position before diving into major changes or decisions.
• 😀 Being invaluable to an organization means understanding where you are in the season and planning for the next 90 days, not two years ahead.
• 😀 Successful CISOs are proactive, anticipating the future state of their business in the near term (90 days) rather than being reactive.
• 😀 Adding value is all about giving others what they need, not just what they want. Needs are essential, while wants are nice-to-haves.
• 😀 A simple but effective way to provide value is to ask others, 'How can I help you?'—this opens up opportunities to support them genuinely.
• 😀 Listening to others and being open to helping them with their needs can significantly improve relationships and respect within the organization.
• 😀 Being a successful CISO requires adaptability to your organization's evolving needs, rather than sticking to rigid approaches or assumptions.
• 😀 Providing tangible support—like helping with small but meaningful tasks—can lead to greater respect and appreciation in a professional environment.
• 😀 Remembering to assess the needs of your team, employees, or vendors can build strong, lasting relationships that enhance your impact on the company.

Q & A

What does the speaker mean by understanding the 'season' you're in as a CISO?

The 'season' refers to the current phase or environment of the business, which may range from a phase of stability to one of rapid change. A CISO must understand this phase to align their strategy accordingly, avoiding the mistake of thinking that the business is always in a constant state of change.

How can CISOs provide value to their organizations?

CISOs can provide value by understanding where the business is in its current 'season' and aligning their actions accordingly. They can also add value by anticipating future needs and planning for them within a 90-day horizon, helping the organization navigate its challenges effectively.

What is the significance of the 90-day period mentioned in the script?

The 90-day period represents an actionable timeframe in which a CISO can anticipate where the business will be and make plans to help guide the company toward its future state. This period is seen as long enough to create impact but short enough to remain adaptable and responsive to changes.

What is the key difference between providing people with what they want versus what they need?

Providing what people want is often about fulfilling desires or preferences, whereas providing what they need addresses critical requirements that are necessary for success. CISOs who focus on needs, especially those that are essential to the business or individuals, become invaluable by solving real problems.

How does the speaker suggest a CISO should approach adding value to others?

The speaker suggests that CISOs should ask others directly how they can help, ensuring they address real needs rather than assuming what would be useful. By offering help in a genuine, simple way, like assisting an overworked employee, the CISO builds respect and value.

Can you provide an example from the transcript where the speaker added value by asking how they could help?

The speaker shares an example of helping an employee who was stressed and overworked. Instead of assuming, the speaker simply asked if there was anything they could do to help, and the employee requested a sandwich and coffee. This small gesture of kindness had a huge impact on the employee's respect for the speaker.

What does the speaker mean by 'genuinely listening' and how is it related to being a world-class CISO?

Genuinely listening involves not just hearing others but truly understanding their needs and responding thoughtfully. This approach is crucial for CISOs to be effective in their roles, as it helps them build trust and create solutions that are aligned with the organization's objectives.

How does the speaker view the relationship between vendors and CISOs in terms of value?

The speaker emphasizes that adding value to vendors, even those who may not be performing at their best, can foster a better relationship. By approaching vendors with empathy and asking how they can help, CISOs can improve service and create long-term value for both parties.

What does the speaker suggest about the role of a CISO in providing respect to employees?

The speaker highlights that respect is earned by genuinely helping employees with their immediate needs. A CISO can build respect by showing empathy, being available to support others in practical ways, and recognizing when others need assistance, rather than just focusing on tasks or technical issues.

Why does the speaker believe the answers to organizational challenges are often already available?

The speaker believes that many solutions to challenges are already within reach, often just not recognized or acted upon. When individuals are ready to listen and apply what they already know, they can unlock powerful insights that lead to effective decision-making and problem-solving.