The Current State of the CISO with Nick Kakolowski
文章指出,首席信息安全官(CISO)的职责范围正在迅速扩大,涉及IT和风险管理等更广泛的领域。成功的CISO通常具备跨行业经验、良好的跨部门关系,并能将安全问题转化为业务语言。然而,许多CISO因额外责任而感到压力增大,导致倦怠和高离职率。为应对这一挑战,组织正在投资于培训项目以帮助CISO提升沟通和领导能力。 2025-2-11 19:46:12 Author: securityboulevard.com(查看原文) 阅读量:4 收藏

Avatar photo

Nick Kakolowski, senior research director for IANS, dives into a survey done in conjunction with Artico Search on the current state of the CISO.

At its core, the study highlights how CISOs are facing an unprecedented expansion of responsibilities, with some thriving under the added scope and others struggling with burnout.

Techstrong Gang Youtube

AWS Hub

Kakolowski explains that CISOs are increasingly expected to take on broader IT and risk management functions, yet only those given real ownership and executive influence see meaningful career advancement and financial rewards. Many CISOs find themselves burdened with additional responsibilities—often without increased authority or compensation—leading to frustration and high turnover. Meanwhile, those elevated to dual CISO-CIO roles report significantly greater job satisfaction, influence, and pay increases.

The report also touches on the factors that differentiate successful CISOs from those feeling overwhelmed. Kakolowski notes that those with diverse industry experience, strong cross-functional relationships, and an ability to frame security in business terms tend to rise faster. As more CISOs gain access to the boardroom, their understanding of risk is evolving; rather than seeing security as an isolated function, they are adopting a business-first mindset, aligning security priorities with corporate strategy.

Despite this, bridging the gap between security and business isn’t always easy. Many CISOs struggle with translating technical concerns into language executives understand. In response, organizations are investing in executive coaching programs, business acumen training, and mentorship opportunities to help security leaders develop the communication and leadership skills necessary for broader strategic influence.

As security continues to integrate with risk, compliance and IT, Kakolowski emphasizes the need for CISOs to proactively seek business exposure—whether through governance committees, customer trust initiatives, or AI strategy teams. Those who embrace this shift will be better-positioned for the next generation of executive leadership.


文章来源: https://securityboulevard.com/2025/02/the-current-state-of-the-ciso-with-nick-kakolowski/
如有侵权请联系:admin#unsafe.sh