EP247 The Evolving CISO: From Security Cop to Cloud & AI Champion

Guest:

•  David Gee, Board Risk Advisor, Non-Executive Director & Author, former CISO

Topics:

• Drawing from the "Aspiring CIO and CISO" book's focus on continuous improvement, how have you seen the necessary skills, knowledge, experience, and behaviors for a CISO evolve, especially when guiding an organization through a transformation?
• Could you share lessons learned about leadership and organizational resilience during such a critical period, and how does that experience reshape your approach to future transformations?
• Many organizations are undergoing transformations, often heavily involving cloud technologies. From your perspective, what is the most crucial—and perhaps often overlooked—role a CISO plays in ensuring security is an enabler, not a roadblock, during such large-scale changes?
• Have you ever seen a CISO who is a cloud champion for the organization?
• Your best advice for a CISO meeting cloud for the first time?
• What is your best advice for a CISO meeting AI for the first time?
• How do you balance the continuous self-improvement and development with the day-to-day pressures and responsibilities?

Resources:

• “A Day in the Life of a CISO: Personal Mentorship from 24+ Battle-Tested CISOs — Mentoring We Never Got” book
• “The Aspiring CIO and CISO: A career guide to developing leadership skills, knowledge, experience, and behavior” book
• EP201 Every CTO Should Be a CSTO (Or Else!) - Transformation Lessons from The Hoff
• EP101 Cloud Threat Detection Lessons from a CISO
• EP104 CISO Walks Into the Cloud: And The Magic Starts to Happen!
• EP129 How CISO Cloud Dreams and Realities Collide
• All CISO podcast episodes
• “Shadow Agents: A New Era of Shadow AI Risk in the Enterprise” blog
• “Blocking shadow agents won’t work. Here’s a more secure way forward” blog