@AppDefects wrote:
What are some traits of a successful CISO? A recent CSO Online survey says:
- Leadership skills
- Communications skills
- Strong relationship with business executives
- Management skills
- Technical skills
The absolute key to CISO success rests on the executive team. Their attitude and actions tend to make or break CISOs.
I would disagree slightly. The key to success is the CISO's attitude and their ability to work with people. The 5 things you mentioned all play a part in that role. A successful CISO will have the ability to understand the dynamic they are coming in to and be able to work with people of varying levels of IT knowledge, work place ethics, power (politics), and personal traits.
An executive team can make or break you, but they will not do it without you having laid the way. If you are a jerk then very few people are going to want to help you succeed.
I would add that it is imperative that the CISO build confidence that others have in the CISO. This is done by building trust and respect. I have seen CISO's fail that had very weak technical skills because they hid their incompetence by using fear and trying to demand that everyone "bow to them" and their "authority". I have seen CISO's fail because they had a "Do as I say!" and not a "Do as I do." philosophy. I have seen CISO's ignore their own policy that they authored because "I'm the security guy! I should be able to do whatever I want." mentality. I have seen CIO's (yes I know not a CISO role, but similar role) fail because they didn't want to get a certification. I have seen many security professionals kill their career by trying to be an authoritative jerk.
