Personal Liability, Security Becomes Bigger Issues for CISOs

The article examines the growing legal and personal risks for CISOs — citing cases like the Uber CISO conviction, SEC actions, and alleged insider data-sale claims — and argues many organizations respond by addressing liability (insurance, contract language, disclosure changes) rather than materially improving security; it advises CISOs to seek explicit legal protections, assess personal/executive risk (including deepfakes and OSINT-based attacks), and prioritize clear risk communication with leadership.