#CISO #cso I have recently been helping with the establishment of an information security program and the work is painstaking, detailed, exacting, and while fun, often difficult. Every decision is fraught with potential calamity. Establishing processes is made harder by the lack of culture to support those policies in an organization that has never had them.

My colleague Nicko said after a couple of weeks of participating in these meetings, "I've worked with CISOs for years, of course, but I have never been this close to how the sausage is made and seen the details. Now I can say, being a CISO is a terrible job."

#CISO #cso I have recently been helping with the establishment of an information security program and the work is painstaking, detailed, exacting, and while fun, often difficult. Every decision is fraught with potential calamity. Establishing processes is made harder by the lack of culture to support those policies in an organization that has never had them.

My colleague Nicko said after a couple of weeks of participating in these meetings, "I've worked with CISOs for years, of course, but I have never been this close to how the sausage is made and seen the details. Now I can say, being a CISO is a terrible job."