CISO add-on—building a cybersecurity culture

A strong leader does not need to accept the “cultural status quo” and can recruit a group of champions or advocates within the company to drive cyber-related results. A strong leader creates a cybersecurity culture where employees are empowered and led with purpose. Alexandra Mercz, chief of staff at GoToFinancials, a financial services solutions provider, shared that in one of her earlier roles before the pandemic, she frequently did her “office rounds,” which meant personally visiting key stakeholders and teams for a quick catch-up at the office.

During one of these office rounds, she stopped by the desk of a very senior and seasoned cyber-technical program manager tasked with implementing a critical solution for the business. As they discussed the deliverables, she changed the topic and asked him, “Do you know why you do what you do?” He looked at her blankly, as if he did not...