“We target CISOs,” say many IT security businesses \u2013 either they say that or that the CISO doesn’t have enough decision power. At Beyond Products we have interviewed many CISOs (for Security Innovation Stories and client interviews), and the question always pops up in my head: are you sure that the CISO is the right audience?<\/p>\n\n\n\n
No CISO was born equal. Beyond the job title, there are huge organizational differences. A municipality’s CISO differs entirely from a bank’s or a SaaS’s CISO. The differences extend far beyond just the organization type\u2014they encompass team size, capabilities, budget allocation, and operational realities.<\/p>\n\n\n\n
Of course, this idea of differences between CISOs isn’t new. Recently, I read Ross Haleliuk’s article about how \u201cnot every security leader works at a Fortune 500 company<\/a>.\u201d It was a good read, but I wondered: what do the numbers say? <\/p>\n\n\n\n That’s why I decided to investigate: <\/p>\n\n\n\n The answers to these questions will be shared in this, and future articles. <\/p>\n\n\n\n