Paolo Dal Cin

[The Last 90 Days of a CISO] What does it truly mean to lead in cyber today? This new publication - The Last 90 Days of a CISO - from Deloitte conducted through the Deloitte CISO Programme is deeply personal to me not just because I contributed to it, but because it reflects the lived experiences of CISOs across industries, geographies, and journeys. Yes, the pressure is real. Yes, the stakes are high. But so is the purpose. This is not a report filled with buzzwords. It’s a mirror showing us what it feels like to hold this role: The invisible load. The firefights and the boardroom pivots. The Sunday night calls. The constant “readiness.” The human cost behind the hero narrative. Some CISOs told us they wouldn’t take the job again. But most told us why they still do it. Because it matters. Because it shapes culture. Because it protects people, not just data. For me personally, being a CISO is not a job, it’s a purposeful mission everyday. There is a sense of pride and honour in leading cybersecurity and being the CISO for Deloitte. Five themes stood out in our conversations: 1. Balance is not a luxury. It’s the foundation for long-term impact. 2. Trust beats tools. Influence is earned, not assumed. 3. Resilience is built daily. Through community, not isolation. 4. People matter most. You don’t succeed alone. 5. Accountability runs deep. But it must be shared, not shouldered. Whether you’re stepping into the role or considering your legacy, this report offers something powerful perspective. Perspective to lead with intention. To focus on what we can control. To shape security cultures that last longer than we do. Grateful to all the CISOs who spoke with courage, vulnerability, and clarity. Well done to the Deloitte T&T Cyber team for this brilliant report. Let’s take control of our time, our story, and our legacy. Together. Peter Gooch Craig Clydesdale Bedria Bedri Susie Sharawi Wil Rockall Nick O'Kelly William McLeod Scott Stephen Wray Nick Seaver Andrew Johnson Viccy Paterson Read the full report here: https://lnkd.in/eN9dgny2 #TL90Ds #DeloitteCISO #CyberSecurity #Leadership #CyberLeadership #BeingHuman #CISO #Wellbeing #Legacy #DeloitteCISOProgramme

71

1 commento

🚨 𝐖𝐚𝐯𝐞𝐬𝐭𝐨𝐧𝐞 𝐣𝐨𝐢𝐧𝐬 𝐭𝐡𝐞 𝐅𝐑𝐄𝐈𝐀 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐂𝐨𝐧𝐭𝐫𝐚𝐜𝐭! We’re proud to be part of the new 𝐄𝐔 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐏𝐫𝐨𝐟𝐞𝐬𝐬𝐢𝐨𝐧𝐚𝐥 𝐒𝐞𝐫𝐯𝐢𝐜𝐞𝐬 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐂𝐨𝐧𝐭𝐫𝐚𝐜𝐭 (𝐅𝐑𝐄𝐈𝐀), in partnership with Unisys and Unisystems . Through Lot 1 – Technical Operations Services, we will support EU institutions over the next four years across all key cybersecurity functions, in line with the NIST Cybersecurity Framework — from governance and risk identification to protection, detection, response, and recovery. This is an inter-institutional framework, available to most EU institutions, agencies, and bodies, offering a powerful tool to strengthen cyber resilience across Europe. 👏 Huge thanks to our outstanding CYB team supporting the EU account — Matteo Albergoni Alessandro Albertini Riccardo Bergamaschi Jérôme de Lisle Noëmie HONORE (She/Her) Jade Le Goff Gianluca Pasolini — for making this happen! If you’re interested in knowing more, feel free to reach out to us directly. #Wavestone #Cybersecurity #FREIA #EUInstitutions #CyberResilience #DigitalTrust #NIST #Teamwork

68

6 commenti

The 2025 Cybersecurity Threat and Risk Management report is here! Developed by Optiv and Ponemon Institute, this report offers front-line insights from 620 IT and cybersecurity pros on how their organizations’ budgets and security practices are keeping up with the evolving threat landscape. You can access the report here: https://lnkd.in/ghPx3Jf4

58

“Greg Barbaccia, the federal chief information officer, said his office will no longer meet with research, advisory and strategy consulting firms. Instead, Barbaccia told his team in an email — shared with federal CIO community and obtained by Federal News Network — that he will only meet with companies that build and deliver actual solutions. “These firms may offer frameworks, diagnostics or perspectives, but we’re not paying to be told what our problems are, or how to conceptualize them. We already know the major challenges we face, the job of today is not to define problems, it is to fix them,” Barbaccia wrote. “This is about focus. Every hour we spend in meetings must move us closer to implementation, not ideation. We are not here to admire a problem — we’re here to solve it.”” https://lnkd.in/exTCZx9U

151

18 commenti

Interestingly, #cyberthreats are advancing unprecedentedly, yet only 2% of organizations have implemented cyber resilience measures across all areas. This insight from PwC’s 2025 Global Digital Trust Insights report highlights the growing gaps in preparedness, leaving businesses vulnerable to #AIdrivenattacks, #cloudrisks, and regulatory non-compliance. AI and #cloudsecurity remain top concerns, with 67% of security executives reporting that GenAI has expanded its attack surface. Despite this, fewer than 50% of CISOs are engaged in strategic planning and tech deployment. While 87% of leaders say measuring cyber risk is crucial, only 15% do it effectively. There is also a growing confidence gap between CEOs and CISOs regarding #compliance, particularly in AI and resilience regulations. As 2025 unfolds, organizations must integrate cybersecurity into business strategy, strengthen #AIgovernance, close the cyber risk quantification gap, and enhance compliance readiness. We need to move from a reactive to a proactive approach to overcome emerging risks. #cybersecurity #datamanagement #riskmanagement #strategicleadership #compliance

36