In this episode, Max Martina, President of Cambridge Leadership Associates, joins Steve Durbin to discuss why so many security failures begin long before a breach occurs, and what leaders can do about it.
Drawing on his work with executive teams going through uncertainty and change, Max explains the difference between technical and adaptive challenges. He sets out why responsibility without formal authority is the reality for most CISOs, and how hybrid working and AI are changing the work of leadership. He also argues that organisations should welcome bad news rather than punish it.
Leadership is disappointing people at a rate that they can sustain.
Key Takeaways:
- Most security failures start long before the breach.
- Authority is not leadership. CISOs rarely have formal power over the business, so lasting change comes from influence built over time with executives and the board.
- Bad news must be safe to surface. Organisations that punish bad news lose the early warnings they need most.
Enhance your listening experience
Follow along with our podcast transcript and discover related ISF resources.
