Bit of all of these for me - though perhaps not so much the tech. Bit of a cheat as I already know where I'm going with this. Big focus on personal development over the coming months..

I've had a CISSP for a few years. Haven't checked my CPEs for a while, so probably in danger of losing it! Recent reading and conversations like this one are a good opportunity to ask myself whether it's worth continuing with it? I certainly don't benefit from it anymore. Sure, perhaps it was a way of getting my foot in the door once. But after that the certification body milks me for the annual renewal fee, and with a clean conscience my employer gets to tick a box on a customer proposal or assurance statement to the effect that they have 'qualified' security personnel. It is no measure of whether or not I can do a job as a security leader as these skills simply aren't taught as part of the programme. Definitely time for a change..

Some really useful insights here @Rich Diston - thanks for sharing!

I was going to be really negative and say it's been a crappy week and I've made little progress. But actually, in the last couple of weeks: I've found an amazing coach, and I've met you lot. So, what could be better? Lots to learn - always. Onwards and upwards!!

@Duncan Proffitt LOL - not quite - but often tempted! I think messaging is hugely important and definitely a skill I need to work on. And to answer your question, I think it's a bit of both. There is another thread on here that talks about fear-based messaging. There is the tendency to stick to the fear script because that is what boards are generally expecting. I think there is also the "so what" part, in the sense that boards are happy to keep kicking the can down the road if nothing that we caution about ends up being the reality..

@Phillipe McCracken interested in your concept of privacy as a strategic enabler and messaging. I assume then that your experience is that privacy is seen as a cost to the business, in a similar way to security that @Rich Diston discussed in the book?