The Peaceful Transfer of Power
Why Cybersecurity Leaders Need a Succession Plan
The Oval Office in the White House has a beautiful oak desk used by the President called the Resolute desk. It was built from the timbers of the British ship HMS Resolute, and a gift from Queen Victoria in 1880. Since President Reagan left office in 1989, each new U.S. President has arrived in the Oval Office after their inauguration to find a private letter from their predecessor waiting on that historic desk. These notes wishing success and offering encouragement are a wonderful tradition and part of the transition between leaders.
In the high-risk cybersecurity world, leadership transitions should follow this example. An abrupt departure or poorly managed handover can lead to dropped balls and confusion that enable cyber disasters and leave a program and team reeling. A cybersecurity leader’s job is to protect their organization, and that responsibility includes succession planning.
When should a leader start thinking about their succession plan? The day they start the job.
CISO jobs don’t have a set term and face myriad unknowns that can lead to rapid changes. For every planned transition such as a retirement, there are many unexpected possibilities such as health issues, family events, changes in company leadership, winning the lottery, and mergers and acquisitions that can lead to sudden unplanned changes.
A well-planned transition offers many benefits, including minimizing disruption, preserving institutional knowledge, and maintaining team morale. Just as a cyber leader prepares an Incident Response Plan, they should have a succession plan that includes:
Identification and development of potential successors
Knowledge transfer
Continuity of key administrative processes and protocols
The more time you have, the more opportunity you have to develop potential successors; by giving rising leaders larger roles in key events so they gain greater exposure and their own footing and voice.
Just as a peaceful transfer of power is crucial for our national stability, a well-planned transition for cybersecurity leadership is essential for organizational security. By being prepared for the unexpected through succession planning, cybersecurity leaders can add to their legacy of protecting the organization. Take inspiration from the Presidential transition and make succession planning a priority.
Hold Fast
Stay True