Great article Gary, I particularly like reading about CISO's that have a roadmap, led by a technical review board, making no/maybe decisions, and helping stakeholders via diplomatic actions. That workflow is crucial to maintaining the operational readiness of systems as it progresses through change. Thanks for taking the time to author this