--- title: Effective Hiring and Retaining Practices for CISOs description: Effective Hiring and Retaining Practices for CISOs --- [![EV_FullColorLogomark_HighRes](https://enterprisevisions.com/hs-fs/hubfs/Logos%202026/EV_FullColorLogomark_HighRes.png?width=2500&height=602&name=EV_FullColorLogomark_HighRes.png "EV_FullColorLogomark_HighRes")](https://enterprisevisions.com/) [Let's talk](https://enterprisevisions.com/blog/hiring-practices-for-cisos#formPopups) - [EVInsight](https://enterprisevisions.com/evinsight-login) - [![facebook icon](https://enterprisevisions.com/hubfs/Image%202023/facebook-icon.png)](https://www.facebook.com/EnterpriseVisions/) - [![Twitter Icon](https://enterprisevisions.com/hubfs/Image%202023/twitter-icon.png)](https://twitter.com/entvisions) - [![linkdin Icon](https://enterprisevisions.com/hubfs/Image%202023/linkedin-icon.png)](https://www.linkedin.com/company/enterprise-visions/) - Strategy - [About the Company](https://enterprisevisions.com/about) - [Our Team](https://enterprisevisions.com/our-team) - [Our Process](https://enterprisevisions.com/our-process) - Technology - [Cloud](https://enterprisevisions.com/cloud-services) - [Connectivity](https://enterprisevisions.com/network-services) - [Data Center/Storage](https://enterprisevisions.com/data-center) - [Deployment & Field](https://enterprisevisions.com/deployment-services) - [Managed Services](https://enterprisevisions.com/managed-services) - [Mobility](https://enterprisevisions.com/mobility) - [Security](https://enterprisevisions.com/information-security) - Results - [Blogs](https://enterprisevisions.com/blog) - [Customer Success Stories](https://enterprisevisions.com/testimonials) - [FAQs](https://enterprisevisions.com/faqs) - [White Papers](https://enterprisevisions.com/resources) - [Contact Us](https://enterprisevisions.com/contact) X #### Download Resource We’ll help you select and implement the right technology solutions to empower your business. Provide your information below and a member of our team will reach out to you shortly. # Blog ## Effective Hiring and Retaining Practices for CISOs March 30, 2015 ![New hire selection](https://enterprisevisions.com/hs-fs/hubfs/Imported_Blog_Media/shutterstock_216140242-300x209.jpg?width=300&height=209&name=shutterstock_216140242-300x209.jpg)If anyone needs another indicator of how quickly online technologies are revolutionizing business, it's in how quickly companies are having to add C-level employees to deal with tech issues.  Just a year or two ago, businesses were only starting to get used to the idea of having a Chief Information Officer at all. Times have changed. Today, cyber-crime problems have reached a tipping point, which requires another set of specializations that can be found in a Chief Information *Security *Officer (CISO).  The CISO usually reports to the CIO, but the position requires broad powers with the discretion to use them with minimal oversight. Demand for CISOs is creating a new shortage of talent, because CISOs are getting snatched up as quickly as businesses can find them.  However, there are good candidates out there, and plenty of others are also training themselves to fill the role. What should a company look for when hiring a CISO? **1. Autonomy** A CISO cannot be a follower. They need to be allowed wide latitude to do their jobs appropriately.  If a cyber-attack happens, the CISO should be ready and able to respond *immediately--*not after a lengthy series of inquiries and approvals from higher-ups. Obviously, a lot of trust goes along with this role, and hiring authorities should take that into account by thoroughly vetting potential CISOs before hiring one. **2. Challenges** Good CISOs right now are concerned largely with their own careers and with finding suitable challenges that will build their skillsets. Considering the demand for CISOs, companies should assume that candidates are considering multiple offers. One deciding factor for the CISO likely will be how interesting and challenging they find a particular company's problems. If everything seems to be running smoothly, highly qualified CISOs are likely to say, "Well, I'm not needed here," and look for another job where they will be more immediately useful. **3. Certifications** The general job of CISO is new enough that it's easy for people to fake credentials or exaggerate their past experiences.  Genuine certifications that are from reputable organizations and that are backed by testing are one of the few reliable ways that a non-technical HR officer can know they're hiring genuine talent. A CISO who cannot produce proof of certifications from external organizations is likely to be too much of a gamble unless that individual has extensive references or other documentation that corroborates his or her claims. **4. Interpersonal Skills** A CISO is in a very delicate position, because the role requires balancing privacy and security needs for the company, its staff, andits customers.  This cannot be treated solely as a technical job. The most effective CISO will regard the human needs of people within and outside the organization. A CISO must have the necessary interpersonal skills to balance out their technical skills and an ability to see the big picture in terms of how policies affect people and their lives. **5. Incentives** Given the demand for qualified CISOs in the industry, many are now setting their own salaries, and, generally, they get them. Furthermore, poaching is incredibly common in the field at the moment. A company should be prepared to reconsider their usual policies in terms of incentives and compensation for the sake of retaining a qualified and effective CISO. It's clear that smart approaches to hiring, vetting, and retaining a quality CISO are necessary. Companies should be willing to sweeten the deal significantly -and to keep it sweet- to hire and hold onto a CISO. The alternative could be a revolving door of short-time hires. Filed Under: [chief information security officer](https://enterprisevisions.com/blog/topic/chief-information-security-officer), [CSO](https://enterprisevisions.com/blog/topic/cso), [Security](https://enterprisevisions.com/blog/topic/security-2), [Cyber Security](https://enterprisevisions.com/blog/topic/cyber-security), [hiring practices](https://enterprisevisions.com/blog/topic/hiring-practices), [human resources](https://enterprisevisions.com/blog/topic/human-resources), [CISO](https://enterprisevisions.com/blog/topic/ciso), [HR](https://enterprisevisions.com/blog/topic/hr), [employee satisfaction](https://enterprisevisions.com/blog/topic/employee-satisfaction), [employee retention](https://enterprisevisions.com/blog/topic/employee-retention), [chief security officer](https://enterprisevisions.com/blog/topic/chief-security-officer) ###### RECENT POSTS - [Top 5 Benefits of Conducting a Gap Analysis in Cyber Security](https://enterprisevisions.com/blog/top-5-benefits-of-conducting-a-gap-analysis-in-cyber-security) - [4 Ways Mobile Device Fleet Management Tools Streamline Modern Businesses](https://enterprisevisions.com/blog/how-mobile-device-fleet-management-streamlines-businesses) - [How Outsourced Telecom Expense Management Can Help Your Business Grow](https://enterprisevisions.com/blog/how-outsourced-telecom-expense-management-can-help-your-business-grow) - [7 Benefits of AI in Cyber Security](https://enterprisevisions.com/blog/7-benefits-of-ai-in-cyber-security) - [How Businesses Use AI To Improve Customer Experience](https://enterprisevisions.com/blog/how-businesses-use-ai-to-improve-customer-experience) - [6 Reasons Why Businesses Should Consider the Cloud for Cyber Security](https://enterprisevisions.com/blog/6-reasons-why-businesses-should-consider-the-cloud-for-cyber-security) ARCHIVES Select Month - [June 2015 (3)](https://enterprisevisions.com/blog/archive/2015/06) - [July 2019 (3)](https://enterprisevisions.com/blog/archive/2019/07) - [August 2019 (3)](https://enterprisevisions.com/blog/archive/2019/08) - [October 2019 (3)](https://enterprisevisions.com/blog/archive/2019/10) - [September 2021 (3)](https://enterprisevisions.com/blog/archive/2021/09) - [November 2013 (2)](https://enterprisevisions.com/blog/archive/2013/11) - [December 2013 (2)](https://enterprisevisions.com/blog/archive/2013/12) - [January 2014 (2)](https://enterprisevisions.com/blog/archive/2014/01) - [February 2014 (2)](https://enterprisevisions.com/blog/archive/2014/02) - [March 2014 (2)](https://enterprisevisions.com/blog/archive/2014/03) - [May 2014 (2)](https://enterprisevisions.com/blog/archive/2014/05) - [June 2014 (2)](https://enterprisevisions.com/blog/archive/2014/06) - [July 2014 (2)](https://enterprisevisions.com/blog/archive/2014/07) - [August 2014 (2)](https://enterprisevisions.com/blog/archive/2014/08) - [September 2014 (2)](https://enterprisevisions.com/blog/archive/2014/09) - [October 2014 (2)](https://enterprisevisions.com/blog/archive/2014/10) - [November 2014 (2)](https://enterprisevisions.com/blog/archive/2014/11) - [December 2014 (2)](https://enterprisevisions.com/blog/archive/2014/12) - [January 2015 (2)](https://enterprisevisions.com/blog/archive/2015/01) - [February 2015 (2)](https://enterprisevisions.com/blog/archive/2015/02) - [March 2015 (2)](https://enterprisevisions.com/blog/archive/2015/03) - [May 2015 (2)](https://enterprisevisions.com/blog/archive/2015/05) - [July 2015 (2)](https://enterprisevisions.com/blog/archive/2015/07) - [August 2015 (2)](https://enterprisevisions.com/blog/archive/2015/08) - [September 2015 (2)](https://enterprisevisions.com/blog/archive/2015/09) - [October 2015 (2)](https://enterprisevisions.com/blog/archive/2015/10) - [November 2015 (2)](https://enterprisevisions.com/blog/archive/2015/11) - [December 2015 (2)](https://enterprisevisions.com/blog/archive/2015/12) - [January 2016 (2)](https://enterprisevisions.com/blog/archive/2016/01) - [February 2016 (2)](https://enterprisevisions.com/blog/archive/2016/02) - [March 2016 (2)](https://enterprisevisions.com/blog/archive/2016/03) - [April 2016 (2)](https://enterprisevisions.com/blog/archive/2016/04) - [May 2016 (2)](https://enterprisevisions.com/blog/archive/2016/05) - [June 2016 (2)](https://enterprisevisions.com/blog/archive/2016/06) - [July 2016 (2)](https://enterprisevisions.com/blog/archive/2016/07) - [August 2016 (2)](https://enterprisevisions.com/blog/archive/2016/08) - [September 2016 (2)](https://enterprisevisions.com/blog/archive/2016/09) - [October 2016 (2)](https://enterprisevisions.com/blog/archive/2016/10) - [November 2016 (2)](https://enterprisevisions.com/blog/archive/2016/11) - [December 2016 (2)](https://enterprisevisions.com/blog/archive/2016/12) - [January 2017 (2)](https://enterprisevisions.com/blog/archive/2017/01) - [March 2017 (2)](https://enterprisevisions.com/blog/archive/2017/03) - [April 2017 (2)](https://enterprisevisions.com/blog/archive/2017/04) - [May 2017 (2)](https://enterprisevisions.com/blog/archive/2017/05) - [June 2017 (2)](https://enterprisevisions.com/blog/archive/2017/06) - [July 2017 (2)](https://enterprisevisions.com/blog/archive/2017/07) - [August 2017 (2)](https://enterprisevisions.com/blog/archive/2017/08) - [September 2017 (2)](https://enterprisevisions.com/blog/archive/2017/09) - [October 2017 (2)](https://enterprisevisions.com/blog/archive/2017/10) - [November 2017 (2)](https://enterprisevisions.com/blog/archive/2017/11) - [December 2017 (2)](https://enterprisevisions.com/blog/archive/2017/12) - [January 2018 (2)](https://enterprisevisions.com/blog/archive/2018/01) - [February 2018 (2)](https://enterprisevisions.com/blog/archive/2018/02) - [March 2018 (2)](https://enterprisevisions.com/blog/archive/2018/03) - [April 2018 (2)](https://enterprisevisions.com/blog/archive/2018/04) - [May 2018 (2)](https://enterprisevisions.com/blog/archive/2018/05) - [June 2018 (2)](https://enterprisevisions.com/blog/archive/2018/06) - [July 2018 (2)](https://enterprisevisions.com/blog/archive/2018/07) - [August 2018 (2)](https://enterprisevisions.com/blog/archive/2018/08) - [September 2018 (2)](https://enterprisevisions.com/blog/archive/2018/09) - [October 2018 (2)](https://enterprisevisions.com/blog/archive/2018/10) - [November 2018 (2)](https://enterprisevisions.com/blog/archive/2018/11) - [December 2018 (2)](https://enterprisevisions.com/blog/archive/2018/12) - [January 2019 (2)](https://enterprisevisions.com/blog/archive/2019/01) - [February 2019 (2)](https://enterprisevisions.com/blog/archive/2019/02) - [March 2019 (2)](https://enterprisevisions.com/blog/archive/2019/03) - [April 2019 (2)](https://enterprisevisions.com/blog/archive/2019/04) - [May 2019 (2)](https://enterprisevisions.com/blog/archive/2019/05) - [June 2019 (2)](https://enterprisevisions.com/blog/archive/2019/06) - [September 2019 (2)](https://enterprisevisions.com/blog/archive/2019/09) - [November 2019 (2)](https://enterprisevisions.com/blog/archive/2019/11) - [April 2020 (2)](https://enterprisevisions.com/blog/archive/2020/04) - [May 2020 (2)](https://enterprisevisions.com/blog/archive/2020/05) - [August 2020 (2)](https://enterprisevisions.com/blog/archive/2020/08) - [September 2020 (2)](https://enterprisevisions.com/blog/archive/2020/09) - [February 2021 (2)](https://enterprisevisions.com/blog/archive/2021/02) - [May 2021 (2)](https://enterprisevisions.com/blog/archive/2021/05) - [May 2023 (2)](https://enterprisevisions.com/blog/archive/2023/05) - [September 2023 (2)](https://enterprisevisions.com/blog/archive/2023/09) - [April 2013 (1)](https://enterprisevisions.com/blog/archive/2013/04) - [April 2014 (1)](https://enterprisevisions.com/blog/archive/2014/04) - [April 2015 (1)](https://enterprisevisions.com/blog/archive/2015/04) - [December 2019 (1)](https://enterprisevisions.com/blog/archive/2019/12) - [January 2020 (1)](https://enterprisevisions.com/blog/archive/2020/01) - [February 2020 (1)](https://enterprisevisions.com/blog/archive/2020/02) - [March 2020 (1)](https://enterprisevisions.com/blog/archive/2020/03) - [June 2020 (1)](https://enterprisevisions.com/blog/archive/2020/06) - [December 2020 (1)](https://enterprisevisions.com/blog/archive/2020/12) - [January 2021 (1)](https://enterprisevisions.com/blog/archive/2021/01) - [March 2021 (1)](https://enterprisevisions.com/blog/archive/2021/03) - [April 2021 (1)](https://enterprisevisions.com/blog/archive/2021/04) - [February 2022 (1)](https://enterprisevisions.com/blog/archive/2022/02) - [April 2022 (1)](https://enterprisevisions.com/blog/archive/2022/04) - [July 2022 (1)](https://enterprisevisions.com/blog/archive/2022/07) - [August 2022 (1)](https://enterprisevisions.com/blog/archive/2022/08) - [September 2022 (1)](https://enterprisevisions.com/blog/archive/2022/09) - [December 2022 (1)](https://enterprisevisions.com/blog/archive/2022/12) - [February 2023 (1)](https://enterprisevisions.com/blog/archive/2023/02) - [March 2023 (1)](https://enterprisevisions.com/blog/archive/2023/03) - [April 2023 (1)](https://enterprisevisions.com/blog/archive/2023/04) - [June 2023 (1)](https://enterprisevisions.com/blog/archive/2023/06) - [October 2023 (1)](https://enterprisevisions.com/blog/archive/2023/10) - [December 2023 (1)](https://enterprisevisions.com/blog/archive/2023/12) - [January 2024 (1)](https://enterprisevisions.com/blog/archive/2024/01) CATEGORIES Select Month cloud security Cloud IT Data Cyber Security Security email Unified Communications Digital Transformation Trends VoIP customer service disaster recovery Industry News Mobility cloud computing IoT cloud migration cost savings cybersecurity Cloud Security business continuity network Uncategorized compliance data breach efficiency BYOD Enterprise UC artificial intelligence productivity Cloud Services Internet of Things UCaaS backup hybrid cloud AI Big Data CIO Company News Customer Experience Microsoft Private Cloud SMB communications data center scalability CRM Cloud Communications Data Analytics Data Centers PBX SD-WAN SaaS WAN cost downtime hardware hybrid work infrastructure malware public cloud software storage Bring Your Own Device Enterprise Visions Management SIP trunking Virtualization Voice over Internet Protocol automation cloud strategy contact center healthcare mobile mobile devices mobile workforce monitoring remote work transition virtualization 5G APIs CCaaS CPaaS CSO CX IT Strategy IaaS LAN MDM MDR MPLS Mobile Device Management PSTN Phone RPO RTO SDN SIP SLA VPN analytics applications benefits best practices business chief security officer cloud backup cloud management cloud migration strategy cloud solutions collaboration complexity data management encryption enterprises environment features firewall flexible implementation prioritization providers routers scalable servers small business support technology the cloud video conferencing APN BC Business Agility Business Assurance Business Strategy CDN CISO COVID-19 CPE Call Centers Cisco Cloud-based technology Colocation Consulting Containerization Control costs Customer Relations DAS DR DRaaS DaaS Data Analysis Data synchronization DevOps Dual In-line Memory Modules (DIMMs) EDR ERP EVinsight GPDR HIPAA HR IP IT Implementation IT admins IT and telecom spend IT costs IT developers IT staffing Information Management KPIs LOB platforms MFA MSP Microsoft Licensing Microsoft NCE Microsoft New Commerce Experience Microsoft security updates Millenials Non-Volatile Memory Express drives (NVMe) O365 Office 365 benefits On-Premise PRI PaaS QoS ROI SD-WAN solution SDN security SMBs Salesforce Shadow Cloud Software as a Service Solid State Drives (SSDs) System Performance TEM Technology decisions Tessa Bergemann UC provider Unified Cloud Platform Virtual SAN (VSAN) Voice over IP WAN encryption Wi-Fi WiFi WiFi calling ZTS access controls access management account protection adware agents agility asset management asset management systems backup power bandwidth batteries benefits of cloud computing bimodal IT branch branch office connectivity branch office security broadband VPN business applications business resilience business security business trends caching gateways call center call quality chief information security officer cloud UC cloud computing security risks cloud contact center cloud cost optimization cloud migration considerations cloud migration key considerations cloud sprawl cloud switching cloud technologies cloud-based hosting cloud-based phone collaboration tools competition connectivity contact center as a service ###### ENTERPRISE VISIONS - [About](https://enterprisevisions.com/about) - [Blog](https://enterprisevisions.com/blog) - [Cloud Solutions](https://enterprisevisions.com/cloud-services) - [Partners](https://enterprisevisions.com/our-team) - [Tech Terms](https://enterprisevisions.com/faqs) - [Cybersecurity](https://enterprisevisions.com/information-security) - [Contact & Support](https://enterprisevisions.com/contact) - [Network Solutions](https://enterprisevisions.com/network-services) - [Privacy Policy](https://enterprisevisions.com/privacy-policy) - [Professional Solutions](https://enterprisevisions.com/deployment-services) [![facebook-footer-icon](https://enterprisevisions.com/hs-fs/hubfs/Enterprisevisions/images/facebook-footer-icon.png?width=68&height=68&name=facebook-footer-icon.png)](https://www.facebook.com/EnterpriseVisions/) [![twitter-footer-icon](https://enterprisevisions.com/hs-fs/hubfs/Enterprisevisions/images/twitter-footer-icon.png?width=68&height=68&name=twitter-footer-icon.png)](https://twitter.com/entvisions) [![linkedin-footer-icon](https://enterprisevisions.com/hs-fs/hubfs/Enterprisevisions/images/linkedin-footer-icon.png?width=68&height=68&name=linkedin-footer-icon.png)](https://www.linkedin.com/company/enterprise-visions/) ###### CONTACT US Enterprise Visions 1030 West County Road E Suite 150 Shoreview, MN 55126 651.450.7900 **[Support@entvisions.com](mailto:Support@entvisions.com)** **How are we doing?   **[Leave us a Google Review Here](https://www.google.com/search?q=enterprise+visions+minnesota&oq=enterprise+visions+minne&aqs=chrome.1.69i57j0i22i30j0i390i650l3.14030j0j7&sourceid=chrome&ie=UTF-8#ip=1&lrd=0x52b2d6946fab9477:0x1f4f5bb68b54ed14,3) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "ronbeltz", "url" : "https://enterprisevisions.com/blog/author/ronbeltz" }, "dateModified" : "2023-07-14T06:02:51.875Z", "datePublished" : "2015-03-30T08:00:03.000Z", "headline" : "Effective Hiring and Retaining Practices for CISOs", "mainEntityOfPage" : { "@id" : "https://enterprisevisions.com/blog/hiring-practices-for-cisos", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://enterprisevisions.com/hubfs/EV_FullColorLogo_Tagline_HighRes%20Cropped.jpg" }, "name" : "Enterprise Visions" } } ```