Skip to content
How to CISO

How to CISO

    • Talks
    • Library
    • Concepts
    • Opinions
    • Podcast
    • About
  • How to CISO Volume 0: The Idealized CISO Job Description
  • How to CISO Volume 1: The First 91 Days
  • How to CISO Volume 2: Risk

Talks

  • Having Zero Trust To Give
  • How (not) to Measure Risk
  • Post-CISO: The CISO to VC Transition
  • Sink or Swim (A CISO’s First 91 Days)
  • The Idealized CISO
  • Handbook: Applying Zero Trust Principles in a Cloud-Centric World
  • Handbook: Environments
  • Handbook: Zero Trust Principles

Opinions

  • The Vulnpocalypse Isn’t Your Problem

  • Zero Trust in Administration

  • The Death of the CIO

  • Why assessing third parties for security risk is still an unsolved problem

  • We don’t need another infosec hero

  • The cloud security emperor has no pants

  • CISOs are still chiefs in name only

  • Vulnerabilities don’t count

  • Drop the SBOM

How to CISO

How to CISO

By CISOs, for CISO Development

(c) 2026 Andy Ellis