CISOs must level up

JC Gaillard published the essay as a Forbes Business Council op‑ed on Feb. 2, 2026, listing his role as founder & CEO of Corix Partners and referencing his book "The First 100 Days of the New CISO." (forbes.com) In the piece Gaillard argues that chronic underinvestment is a misleading diagnosis and that "strategic execution" — not just budget — drives long‑term security outcomes, a dynamic he ties to short CISO tenures and what he calls a "cybersecurity spiral of failure." (forbes.com) Gaillard rejects the simple fix of handing CISOs formal decision rights in isolation, saying authority in large, siloed firms is earned through influence, stronger leadership, and better talent development rather than granted by board charters. (forbes.com) Forbes' post was republished and discussed on Gaillard’s own Corix Partners site and his Medium profile, where he has run a series of leadership and CISO‑focused columns and resources tied to his advisory work. (corixpartners.com) The article explicitly responds to a Nov. 7, 2025 Computer Weekly discussion — reprinted on PA Consulting’s site — that called for redefining accountability and empowering CISOs with decision‑making authority. (paconsulting.com) Industry outlets have been tracking the same debate: SecurityInfoWatch documented the CISO’s move toward boardroom influence in 2025, and CSO Online has reported CISOs expanding into broader business authority and enterprise risk roles this year. (securityinfowatch.com) Gaillard has amplified his leadership message through interviews and podcasts tied to his book, including a Nov. 4, 2025 interview and a Spotify podcast appearance, underlining a continued campaign on CISO leadership and first‑100‑days playbooks. (securitytransformation.com)