Mike Johnson

At some point you go, this was really bad.

And then you spend the rest of your career thinking, I'm never going to do that again.

So that's step one.

By the way, what you just said, that's going to be the life of a CISO.

And I'm never going to do that again.

Daily.

Like, oh, well, that was bad.

Let's not do that again.

All right.

But the reality is this really is where our networks come in handy.

If I'm looking for a solution to a problem I have, the first thing I do is I turn to my peer CISOs, like, how are you solving this problem?

And that helps build the shortlist, because you then have context.

You're not just going to Google and saying, hey, I need to solve this, or worse, going to Gartner and saying, hey, I need to solve this.

It really comes down to talking to your peers.

And then it's like construct your list of questions.

What are your requirements?

Make sure, send that out to all of your short list.

Get those answers back.

Pick a couple that make great answers.

Then you do your proof of concept.