The thrust of the book I've been reading, "Why CISOs Fail," is that being grim is probably the main mistake CISOs make. It's their job to find opportunities tha

The thrust of the book I've been reading, "Why CISOs Fail," is that being grim is probably the main mistake CISOs make. It's their job to find opportunities that fit within the company's existing priorities to improve the security posture, not to be delivering bad news in huge doses all the time. Besides, the CISO is there not to do the work but to be a partner at the table.