Given my situation, I am thinking a lot about what makes a good ciso. I don’t think I was particularly good, but that’s another story.

I am curious what the community thinks makes a good CISO, at least from one narrow perspective. Do you think CISOs should be:

Deeply technical
35.8%
Marginally technical, mainly business
60.6%
All business, technical stuff if what employees are for
3.7%
Poll ended at .
@jerry A CISO has to be able to convince the CEO and the Board to fund security initiatives. A CISO will have to make the business case to them that it is worth the investment. That is the most important thing a CISO can do.