Undercover

Survivor: CSO Longevity

How I've managed to keep the same job for more than a decade

By Anonymous

June 15, 2007CSO

Very few CSOs last more than a few years at any given place. The turnover rate for security chiefs is pretty consistent with that of CIOs and some other C-level executives. Every three or four years, it seems, it's out with the old and in with the new. There are a few reasons for this lack of longevity, not the least of which is a lack of political savvy. Find yourself on the wrong side of a power struggle and you could end up pushed aside if not outright ousted.

Senior executives often surround themselves with people they handpick, and that's great when you're the one riding the coattails. But what happens when your benefactor falls out of favor with the CEO or board of directors? Odds are that youâ¬"ll be asked to seek opportunities elsewhere, too, if you haven't cultivated good relations with other key executives.

Likewise, if you're aligned too closely with the wrong person or group, guilt by association can stymie your career even if you aren't forced out altogether. Constituents in your organization may begin to give you the cold shoulder, and getting things accomplished in such an environment can be excruciatingly difficult if not almost impossible.

Now I don't pretend to know all the answers for keeping a CSO job forever. But I will confess to having been CSO of the same company for more than a decadeâ¬through a new boss every year or so and more mergers and acquisitions than I'd care to count. Sure, I think I'm good at my job, have hired well and produce consistent results; that goes a long way to not having to clean out one's office. But there are also some basic CSO survival skills that have helped me keep my job.

Survival Strategy 1: Learn to Adapt

One thing I've realized is that there are times when going with the flow is the only sensible choice. It's a lot like being in a kayak. Forget which way the current flows and you'll find yourself upside down in an instant, which is way over on the terrifying side of thrilling.

I have to admit that as a fledgling kayaker years ago, I foolishly ventured out onto some stretches of white water before I perfected my Eskimo rollâ¬that is, the ability to right yourself from being underwater without getting out of the boat. I had no business being on dangerous rivers without the necessary skills, but the allure was great and off I went. Luckily I compensated with a far less elegant and more dangerous approach, the wet exit, where the point is to get out of the kayak and get your head above water where you can breathe and see the rocks you're about to be washed into. Soon after, though, I adapted and learned to roll the kayak. I practiced the skill in calm waters until I could execute it flawlessly in high-pressure, fast-moving situations.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

Manage your IT more effectively

Secure your virtual and physical environments with the same software

Simplify your data center with Juniper Networks. View the webcast

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

Digital Identity Protection and Data Security Get Personal

Welcome to the age of Service-Oriented Security (SOS)

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

The Case for Business Software Assurance ~ Securing Your Applications

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

5 Steps to Secure Outsourced Application Development

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

Efficient - Flexible - Compliant

Any company can promise identity protection. Only Debix can prove it

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

IDC Defines an Identity and Access Management Submarket

Using Likewise to Comply with PCI Data Security Standard

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Enabling Compliance with Converged Mainframe Security and Storage

Managing SSL Security in Multi-Server Environments

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Taking the Botnet Threat Seriously