How to survive as a CISO aka 'chief scapegoat officer'

An RSA Conference panel of CISOs shared guidance on protecting professional integrity and careers when confronting unethical practices or security incidents: negotiate D&O and personal legal liability insurance and a golden parachute, rigorously document decisions and meeting minutes, and recognize that HR and ethics committees serve the employer. Panelists advised avoiding lawsuits and media disclosures to minimize blacklisting risks, citing the Uber CISO case as an example of reputational and legal complexities.