Thanks. I am interested in hearing from the practitioners what they would like their CISO to know/be/do to be a better CISO

I’m thinking about getting back in the game. What does everyone thing a CISO should know? What makes a good CISO?

I’ve worked in all levels of management, including C-level at a Fortune 500 company, and I can tell you that from the perspective of the C level, the tools are a given. If the employees have complaints about the tools, the perception is that either the mid to lower level management or the employees are not competent and need to be replaced with ones that are able to deliver on the promise of the tools.

(I say this without judgement - most of the time it’s BS, some of the time it’s true)

What do yall think a CISO of today needs to know/understand?