To achieve a breach-deterrent culture, the focus must shift from the CISO to the individual. It is crucial to recognize that the CISO can neither behave cybersecurely for you in your professional, personal, or family life nor offer anything that will address your personal and family cybersecurity, as that would violate your privacy, yet all areas affect your organization's cybersecurity. A culture of cybersecurity commences and culminates with the individual.
To cultivate a breach-preventative culture of cybersecurity, it is necessary to start at the top. If you don't, these highest-cyber-risk individuals will continue to bring their professional, personal, and family cyber risks into the organization. This behavior sets a precedent that employees may replicate, making breach prevention nearly impossible. Therefore, to mitigate cyber threats effectively, it is critical to lead by example and foster a culture of cybersecurity from Board down.