Every new CISO inherits a program built by someone else, measured by metrics someone else chose. The board is not watching for the next incident so much as watching for a sign the program is actually changing, not just continuing under new management. The instinct is to keep the lights on for the first quarter […] The post The first 90 days: A new CISO’s playbook for modernizing human risk appeared first on Fable Security .