Tarah Wheeler on Cybersecurity Leadership and the Need for Better Industry Data

Summary

In an interview, CISO Tarah Wheeler discusses cybersecurity leadership, burnout and risk management, and argues that a lack of reliable industry benchmarks and statistics makes security decisions harder.

Key points

• Wheeler says experience across red teaming, security operations, physical security and compliance helps leaders understand how people may undermine security policies.
• She argues that the cybersecurity industry lacks reliable benchmarks and statistics, complicating decisions about phishing tests, identity management, expected attacks and cyber-insurance returns.
• Wheeler advocates creating a US Bureau of Cyber Statistics to provide a trusted basis for security decisions.
• She cites NIST workforce reductions, including reported losses at a lab responsible for testing and validating government encryption, as a concern for cybersecurity evidence and expertise.
• Her leadership advice emphasizes helping others succeed without seeking credit and accepting failure as part of making progress.
• Wheeler describes burnout as often arising from feeling trapped and argues that addressing the underlying situation matters more than generic self-care advice.

People

Vendors

Industries