Being a CISO isn’t easy.

Whether you’re a long-time CISO, a first-time CISO, you aspire to be a CISO someday, or you work with or hire a CISO, How to CISO is your canonical reference library. Collecting and synthesizing wisdom across the CISO community, we aim to provide clear, actionable guides for CISOs as all levels. From strategic topics like structuring your organization, implementing security, and reporting to the board to tactical topics like zero trust, AI, and identity, you can make How to CISO your quick reference.

The Library collects the major works (long-form Volumes, short-form Handbooks, and Talks) of How to CISO; Concepts lets you look at content based on topic. Opinions are the interesting opeds written by the How To CISO crew, and Podcast? Well, find interesting podcasts there until the How To CISO podcast launches!

  • How to CISO Volume 0: The Idealized CISO Job Description
  • How to CISO Volume 1: The First 91 Days
  • How to CISO Volume 2: Risk
  • RSAC 2025 CISO BootCamp: The Idealized CISO
  • RSAC 2025: The CISO to VC Transition
  • RSAC 2025: Zero Trust To Give
  • Sink or Swim (A CISO’s First 91 Days)