The CISO in 2020 (and beyond): A chat with Bruce Potter

#### Executive summary This interview with Expel's CISO Bruce Potter reflects on how 2020 elevated the CISO role, identifies social engineering (often combined with ransomware) as the top security threat, and outlines 2021 priorities: product and software security, formalized risk management, and improved cloud authorization; it also stresses lessons from rapid remote work adoption, attention to employee welfare, and the value of certifications like ISO27001/27701 for customer trust.