When an executive rejects a security recommendation, it's worth asking what would need to change for a different answer. That question reveals constraints we didn't see and persuasion paths we didn't consider.
https://zeltser.com/rejected-security-recommendations
#cybersecurity #securityleadership #CISO #infosec

When Executives Reject Your Security Recommendations
A rejected security recommendation feels personal, but it often reflects competing demands the security team doesn't fully see. Knowing how to act on that reality helps the CISO become someone the business trusts with its priorities.
Lenny Zeltser