EXPEL BLOG

Supercharge your first 100 days as a new CISO

· 1 MIN READ · GREG NOTCH · JUL 10, 2023 · TAGS: Careers

Congratulations! You’re a newly minted chief information security officer (CISO). Maybe this is your first CISO role, or perhaps you’ve been a security leader at other organizations—either way, you’ve got a long to-do list.

If your interview was like mine, you probably met with your C-suite colleagues, talked with some folks on your team, and maybe even had calls with the board of directors. I remember feeling like I had a pretty good handle on my priorities for defending the org. And then my first day after onboarding began, and the reality of getting organized and down to business set in. I had lots of questions and a growing list of concerns, but knew I couldn’t tackle everything all at once. I know from experience, it can quickly get overwhelming, and sometimes you aren’t sure where to start.

Sound (or feel) familiar?

Don’t fret! We’re all in this together. Lots of security leaders have been in your shoes before, including many of our customers (and me too!!). We could share some of our advice, but we think you’d probably rather hear from your peers. That’s why we asked seven of our customers’ CISOs for their top tips on making the most of a new security leader’s first 100 days on the job.

Their helpful tips run the gamut, including insights on:

  • Getting to know the business and the team
  • Evaluating the org’s existing security tools
  • Building relationships
  • Communicating to the wider company

And lots more.

It’s all in our new ebook, CISO-Powered Checklist. Click on that link to download your copy.

Here’s a sneak peek at the kind of wisdom you’ll want to consider during the CISO interview process. This is from Deborah Wheeler, SVP, CISO, Delta Air Lines:

“Prior to accepting any new role, make it a condition of acceptance that you receive approval to have a breach assessment performed within the first 100 days. I know CISOs who walked into a mess that was never disclosed to them and, in at least one case, there was litigation that ensued within that person’s first 90 days in role. You want to know what you’re getting, and sometimes not even the CIO is aware of how messy things are. Do an independent assessment and know what you’re going to have to address.”

Give it a read; we think you’ll be glad you did.