Yass Partners

You’re a CISO entering a new company (exhale, you’re going to do great). Focus on these 6 things: 1?? Prepare for an incident You’re the CISO now. The first thing to do is anticipate something will go wrong and be prepared with the resources you’ll need.? 2?? Put out any fires You walk in, and people are waiting on a decision, make the decision. You walk in and people are complaining about X, fix X. 3?? Learn the people & environment Understand personalities and what the ‘norms’ are. Tune your job to the environment. 4?? Build a plan Map out your North Star security plan and communicate it. Doing so helps stakeholders see your direction. 5?? Win over the people You’ll need their support eventually, so make allies early. Especially on your team. 6?? Find a way to sparkle Once you’re oriented and have a plan. Find the opportunity to stand apart in just the right ways. ? Sparkle. Are you preparing to start a new role? Did you recently start?? Send us a DM and let us know “what’s keeping you up at night.”? P.S. Being a CISO is not easy, and it's also not what it 'used to be.' Follow @YassPartners for helpful frameworks, templates, and experiences to support your journey.

A few years into your role at your current company - you decide that the right decision is to stay. This unlocks 3 opportunities. Which is right for you? Will you: ? Keep at it ? Slow it down ? Accelerate In this article, co-authored by @Yael and @Lenny Zeltser, they explain each strategy. https://lnkd.in/eugrGkGy

A few years into your role at your current company - you decide that the right decision is to stay. This unlocks 3 opportunities. Which is right for you? Will you: ? Keep at it ? Slow it down ? Accelerate In this article, co-authored by @Yael and @Lenny Zeltser, they explain each strategy. https://lnkd.in/eugrGkGy

Information Security Leaders generally all have the same goal: Adequate Security. Setting a realistic target is the first step to winning executive support. ??Adequate is between Insufficient and Stellar and it's perfectly acceptable. ??It's also understandable and a reasonable measure to discuss with Executives, Committees and Partners. ??Adequate keeps you out of court and avoids fines. ??Do your technology policies and security controls adequately protect your company's assets? ??When companies define their threshold for Adequate Security it serves as a clear baseline and focuses resources where they are needed. ??Bonus - by clearly articulating Adequate Security, you open an honest discussion around resource allocation. Which is one of the fastest ways to align the Security and Technology programs to business objectives. It's natural to want to do more, but in these markets - delivering Adequate is another way of delivering measurable value within the company's Risk Tolerance.

CISO Chief of Staff: Your role needs to be a whole lot more ‘team pace-setter.' If you’re a Tech PM, or manage a Tech PM have you had this discussion? Consider having this discussion with your team...

It's hard to transition from 'leading it' to 'supporting it.' And yet, it's an indication of having matured things enough that they can be led by others. ??It's also the best way to free up capacity for new challenges and innovation. CISOs and security leaders are particularly good at 'creating' and 'establishing.' In 2025, you'll increase your value as you transition ownership and support business peers. This is your reminder. (For more reminders, check out the article in the comments)

If you haven't already shared an update with executives about DeepSeek - copy ours! Do you remember the people you worked with 2 jobs ago? Reconnecting with them may be the best :30minutes you spend. Research says so. And more.

You've already submitted and presented your 2025 roadmap. Great! But what will your actions and results look like at the end of the year? How will you describe it? We organized our 2025 recommendations into 4 higher level actions: 1?? Build resilience and adaptability into your team to strengthen it 2?? Shift your team’s role on projects from lead to partner 3?? Ensure cross-functional relationships feel integrated and mutually aligned 4?? Spend differently There are 15 specific recommendations - use 'em.

One of the weird growth moments for executives is realizing that they are an 'executive.' Executives are 'looked up to' and 'noticed' much differently than other team members. For Technology Executives, you'll need to pay attention to how you do things and when you say things just as much as what you say and do.

Let's be honest, you like most of our stuff but you don't love having to come get it. You'd rather hear from us in your email inbox, wouldn't you? We're starting (occasional) emails. (The fact is, it's a way to get our noses out of social and consume in chunks vs in 'posts.') Wanna sign up to be included? Here you go: https://lnkd.in/e2TmDTUP Wanna see what it looks like? Sure, here (yes, we're already revising the format and links): https://lnkd.in/e8smp64b Certainly, you don't want to miss out. Sign up (you can always cancel later). https://lnkd.in/e2TmDTUP Thanks! Turns out we have a lot of "start of year" announcements and reminders to make. Don't miss out.