Sign in Subscribe

Brian Weidner

Brian Weidner

Days 61–90: Start Executing and Show Early Wins

Days 61–90: Start Executing and Show Early Wins

Blog Series: Your First 90 Days as a CISO Post 3 of 4 A Plain-English Guide for New, Aspiring, and Future Security Leaders You've listened. You've assessed. You've built your roadmap and started making your business case. Now it's time to

Days 31–60: Assess the Landscape and Build Your Roadmap

Days 31–60: Assess the Landscape and Build Your Roadmap

Blog Series: Your First 90 Days as a CISO Post 2 of 4 A Plain-English Guide for New, Aspiring, and Future Security Leaders The listening phase is behind you. You've spent your first month meeting people, asking questions, and building a mental model of the organization. Now

Days 1–30: Listen, Learn, and Don't Break Anything

Days 1–30: Listen, Learn, and Don't Break Anything

Blog Series: Your First 90 Days as a CISO Post 1 of 4 A Plain-English Guide for New, Aspiring, and Future Security Leaders Congratulations. You just landed the CISO role. Whether it's your first time in the seat or you're stepping up from a deputy

The Most Important Skills for a Cybersecurity GRC Professional (Hint: They’re Not Technical)

The Most Important Skills for a Cybersecurity GRC Professional (Hint: They’re Not Technical)

InfoSec Made Easy Career Development in Cybersecurity The Most Important Skills for a Cybersecurity GRC Professional Hint: They're not technical Ask most people what a GRC professional does, and you'll get one of two answers. Either a blank stare — because Governance, Risk, and Compliance isn'

Structuring Roles and Gaining Executive Approval to Build the Organization

Structuring Roles and Gaining Executive Approval to Build the Organization

InfoSec Made Easy Security Leadership and Organizational Development Structuring Roles and Gaining Executive Approval to Build the Organization How to make the business case for security growth — and keep earning the trust that makes continued investment possible You've done the work. You've mapped the gaps, built

What Functions a Large Enterprise Security Organization Must Have — And Why

What Functions a Large Enterprise Security Organization Must Have — And Why

If you are operating in a large enterprise, you are not building security for coverage. You are building it for: Scale Resilience Regulatory defensibility Revenue protection Investor confidence Brand preservation At this stage, “having security tools” is irrelevant. What matters is: Clear functional ownership aligned to enterprise risk. Let’s

What to Outsource (Without Losing Control)

What to Outsource (Without Losing Control)

InfoSec Made Easy Building Your Security Team Series — Part 2 Smart Use of External Partners How to extend your security capabilities through outside partners — without losing the oversight and accountability that leadership depends on you to maintain At some point in every midsize security leader's career, the math