Pros
Legacy employees and SMEs still know the environment and genuinely care. The prior CSO built real security posture, remediated 50+ findings, and encouraged balance and collaboration.
Cons
The new CSO is a CIO in disguise, with little regard for actual security. His obsession is with AI—not even security-related AI, just whatever buzzword will get him attention and name recognition. Instead of understanding the environment or focusing on risk, his energy goes into promoting himself and chasing shiny tech narratives. He’s quick to tell everyone how smart he is, but doesn’t dig into the details, doesn’t understand the current environment, and doesn’t build achievable strategies. Instead, he parrots whatever leadership wants to hear, functioning more as a “yes man” than as a true security leader. The result? Real security threats are ignored, employees feel attacked instead of supported, and the program drifts further away from anything meaningful. Compared to the prior CSO—who delivered measurable improvements and encouraged trust—the downgrade in leadership is impossible to miss.