← Voltar ao feed
low

Opinion: ISF Chief Steve Durbin Draws Risk Leadership Lessons From Personal Cancer Diagnosis

1 fonte(s) · 1 atualização(ões) · publicado 29/10/2026 13:30 · coletado há 3 dias

Steve Durbin, Chief Executive of the Information Security Forum (ISF), published a personal opinion column on SecurityWeek describing his stage-three prostate cancer diagnosis and the leadership lessons he draws for risk and security executives. The piece argues that risk appetite shifts when the asset at stake is personal, and that security leaders should model curiosity, question assurances, and demand clarity on assumptions and trade-offs. Durbin links resilience to preparation, routine, boundaries and recovery, criticizing a cyber culture that normalizes exhaustion, all-nighters and permanent on-call availability. He also frames transparency and psychological safety as controls: organizations that demand polished certainty from leaders discourage the early incident disclosure they claim to value. No threat activity, vulnerabilities or indicators are discussed; this is commentary with no direct defensive action required.

Linha do tempo

  1. securityweek.com ↗ · pub. 29/10/2026 13:30 · coletado 29/10 14:00 primeiro registro

    Opinion: ISF Chief Steve Durbin Draws Risk Leadership Lessons From Personal Cancer Diagnosis

    ler a análise desta fonte

    Steve Durbin, Chief Executive of the Information Security Forum (ISF), published a personal opinion column on SecurityWeek describing his stage-three prostate cancer diagnosis and the leadership lessons he draws for risk and security executives. The piece argues that risk appetite shifts when the asset at stake is personal, and that security leaders should model curiosity, question assurances, and demand clarity on assumptions and trade-offs. Durbin links resilience to preparation, routine, boundaries and recovery, criticizing a cyber culture that normalizes exhaustion, all-nighters and permanent on-call availability. He also frames transparency and psychological safety as controls: organizations that demand polished certainty from leaders discourage the early incident disclosure they claim to value. No threat activity, vulnerabilities or indicators are discussed; this is commentary with no direct defensive action required.