Insights and updates
from across the team.

Filter By:

Culture Cyber Data Engineering Effectiveness Executive Accountability F-Ciso Fractional Ciso Identity and Access Management Incident Handling Incident Preparedness Incident Readiness Incident Response Information Security Insurance Security Security Programs Strategy Tech Debt Burndown Technical Debt Clear Filters
10 Jul 25
Selecting a F-CISO, Part II: Assessing Cultural Change and Threat Response Capabilities
10 Jul 25

Selecting a F-CISO, Part II: Assessing Cultural Change and Threat Response Capabilities

by Ken Jenkins, Pablo Breuer

This is Part 2 of our 3-part series on selecting fractional CISOs. In Part 1, we covered evaluating experience and program-building skills. Today, we focus on the harder-to-assess but equally critical capabilities: driving cultural transformation and managing real-world security threats.

Read more
8 Jul 25
Selecting a F-CISO, Part 1: Evaluating Experience and Program-Building Skills
8 Jul 25

Selecting a F-CISO, Part 1: Evaluating Experience and Program-Building Skills

by Ken Jenkins, Pablo Breuer

This is Part 1 of our 3-part series on selecting and managing fractional CISOs. Our previous post explored the strategic rationale for deploying a fractional CISO before hiring your first permanent Chief Information Security Officer. Part 2 covers evaluating experience, program-building skills, cultural change capabilities, and threat response experience.This series provides a comprehensive guide to finding the right change agent for your organization’s security transformation.

Read more
17 Jun 25
Before hiring their first Chief Information Security Officer, CEOs and boards should consider a fractional CISO to build foundational security programs that set the permanent CISO up for success
17 Jun 25

Strategic Deployment of a Fractional CISO

by Pablo Breuer, Nick Selby

Before hiring their first Chief Information Security Officer (CISO), CEOs and boards should consider a fractional CISO (F-CISO) to build foundational security programs that set the permanent CISO up for success. This strategy addresses a critical disconnect: executives often view security breaches and compliance failures as technical problems, but these business-threatening issues typically stem from cultural and process deficiencies requiring organizational transformation, not just technical expertise.

Read more
← Prev Next →