This page is protected with a password

Kovrr
Kovrr
Kovrr is a cyber risk quantification platform I helped design as a core product designer in the company.
Over the years, I’ve worked closely with security leaders and risk analysts to design tools that translate statistical risk models into actionable business insights. My goal was to create an experience that helps CISOs understand their organization’s financial exposure to cyber threats - and communicate that exposure clearly to executives and stakeholders.
Type
B2B SaaS Platform
Date
2021 - Present
Industries
Cybersecurity
Risk Management
Fintech
Challenge
The core challenge was translating statistical risk modeling and financial exposure data into a language that CISOs can understand, act on, and communicate upstream to their executive teams. The product needed to bridge deep, data-heavy models with day-to-day operational needs, making complex risk tangible, explainable, and actionable.
Solution
I designed an experience that puts clarity and control in the hands of CISOs. The interface translates probabilistic models into digestible visuals and narratives, aligning risk with potential business impact. I focused on enabling users to not only explore their organization’s exposure, but also justify it in financial terms, prioritize responses, and drive internal alignment - from security teams to the boardroom.
Risk Evaluation - Where CISOs start their day
I designed a dashboard that offers a calm, focused overview of the organization’s cyber risk landscape. Instead of overwhelming users with scattered data, I brought key insights - status, trends, and open tasks - into one structured, scannable view. It’s not just a screen - it’s a launchpad for action.
Zoom in without getting lost
The product needed to support both high-level strategy and deep operational work. I created an intuitive drill-down experience that lets users explore each framework, domain, and control in context.
It’s easy to track gaps, slice the data, and surface what really needs fixing.
Cyber risk, over time
This view helps users track their cyber risk over time, with visual comparisons that reveal both internal and external shifts.
The page presents the organization’s current risk alongside its theoretical minimum and maximum, based on control implementation, making it easy to see whether changes stem from the company’s actions or broader shifts in the threat landscape.
Granular breakdowns and parameter-based filters provide further context, while a built-in changelog highlights exactly what was updated between runs.
One place for every red flag
To support accountability and long-term planning, I added a dedicated Risk Register. It collects all identified risks in one sortable list - with ownership, severity, mitigation status, and comments. It’s the go-to place for anyone managing security at scale.
See what drives the model - and what you can do about it
Behind every quantified risk figure lies a sea of input data. This dashboard offers full transparency into the supporting information pulled from various integrated sources. It shows exactly what goes into the quantification model, helping users understand the logic behind their organization’s financial exposure.
Beyond just surfacing raw data, the view highlights actionable insights - enabling users to respond, communicate, and plan with greater confidence.
Design Process
User Personas

Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”

Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m always scanning for what could go wrong - not because I’m pessimistic, but because it’s my job to stay one step ahead.”

Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 2
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 2
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 2
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 2
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Sam, The CISO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Sam, The CISO
Sam is responsible for overseeing the development, implementation, and management of the organization's information security strategy and programs.
Age
40
Status
Married + 2
Location
San Francisco, California
Education
BA in Business, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), eg.
Sam, The CISO
Goals
Prove to the board that the team is doing the right things to protect the company’s information assets.
Determine the right security strategy and policies for the organization while supporting the needs of the business.
Justify the budget he needs for next year.
Security isn’t just about keeping threats out - it’s about proving to the board, the business, and myself that we’re making the right choices, every day.”
Sam, The CISO
Pain Points
He is asked by executives and board to prove that he is making the right decisions and meeting his targets.
He needs to operate in a realm of high uncertainty when building his strategy - the connection between mitigation efforts and their actual effectiveness is vague.
Everyone wants proof we’re secure - but when the threats are invisible and the wins are things that don’t happen, how do you measure success?”
Sam, The CISO
Behaviors
Open to new ideas, technologies, and strategies, but rather cautious.
Tend to worry excessively about future events, potential dangers, and negative outcomes.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Michael, The CRO
Micael is responsible for identifying, analyzing, mitigating, and monitoring risks to support strategic decision-making, protect organizational value, and promote sustainable growth.
Age
50
Status
Married + 3
Location
Chicago, Illinois
Education
MBA in Risk Management, Certified Risk Manager (CRM), Chartered Enterprise Risk Analyst (CERA)
Michael, The CRO
Goals
Feel comfortable with the estimation for the likelihood of the risk to happen to his company.
Understand the risk associated with a new regulation as fast as possible.
Educate peers and executives on risk.
Risk isn’t just a number - it’s a language the whole company needs to understand. My job is to translate it before it’s too late.”
Michael, The CRO
Pain Points
He has to manage vast amounts of data related to risk metrics.
He has to keep up with evolving regulatory requirements and compliance obligations across multiple jurisdictions.
He often encounter resistance to risk management practices, inadequate risk awareness among employees, and other cultural barriers.
I’m juggling mountains of data, shifting regulations, and a company that still thinks risk is someone else’s problem.”
Michael, The CRO
Behaviors
Relatively open to new opportunities, paradigms and and approaches.
Prefers “working behind the scenes”, conduct researches and analyses, but can engage with stakeholders effectively.
I’m most comfortable behind the scenes, digging into the data - but when it’s time to explain the risk, I know how to make it clear to the people who need to hear it.”
Let's Work Together :)
lotemeldar@gmail.com

052-2690656

© 2025 all rights reserved
Design and development by Lotem Eldar