J&J Spin-Off CISO on Maximizing Cybersecurity

Kenvue's first CISO, Mike Wagner, describes building a streamlined, cost‑effective security program after spinning off from Johnson & Johnson: the team inventoried and consolidated legacy tools (keeping roughly half), chose modern replacements where appropriate, retained IAM initially, and assembled a mix of legacy business-savvy staff and new technical hires including business information security officers (BISOs). The strategy emphasizes embedding AI/ML and automation for IAM, behavioral analysis, supplier assessments, and threat detection, with future plans to migrate to modern IAM, adopt zero trust, and enhance technical controls to ensure scalable, efficient security.