Why Today's CISO Must Be a Business Enabler

Name: Why Today's CISO Must Be a Business Enabler
Uploaded: 2026-10-06T07:49:57-04:00
Duration: 37 s
Description: The role of the CISO has changed dramatically over the past two decades. Today's security leaders are expected to be more than technologists or gatekeepers. They must be strategic thinkers, business enablers, and cultural leaders capable of navigating...

Commvault

10/06/2026

0 (0%)

Report Like Favorite

TL;DR

The CISO role has fundamentally shifted from technical gatekeeper to strategic business enabler over the past two decades, requiring a much broader leadership mandate.
Mookencherry's memorable framing — moving from the 'department of NO' to the 'department of KNOW' — captures the core expectation placed on modern security leaders.
Today's CISOs must also be cultural leaders, adapting to a constantly changing environment that includes evolving threats, organizational politics, and shifting business priorities.

Summary

In this short clip, Shefali Mookencherry, CISO at the University of Illinois Chicago (UIC), delivers a sharp reframe of what modern security leadership demands. She contrasts the CISO of 2000 — a technologist defined by restriction, the "department of NO" — with today's imperative: becoming the "department of KNOW." That wordplay carries real strategic weight. Today's CISO must synthesize threat intelligence, organizational culture, political dynamics, and business priorities into decisions that enable rather than obstruct. Mookencherry argues that the role has expanded well beyond technical gatekeeping into cultural leadership, requiring CISOs to influence behavior, build trust across the enterprise, and align security posture with organizational goals. The shift from gatekeeper to enabler is not optional — it is a survival requirement for security leaders operating in environments where threats, regulations, and stakeholder expectations are all evolving simultaneously. This clip is a concise articulation of a broader industry conversation about the expanding mandate of the modern CISO.

Chapters

0:00 - The CISO of 2000
0:11 - From NO to KNOW
0:15 - Strategic and Cultural Leadership
0:27 - Enablers, Not Gatekeepers

Key Quotes

0:09 "They were the department of NO."
0:11 "Today we have to be the department of KNOW."
0:24 "Today CISOs have to be cultural leaders as well."

FAQ

What does Mookencherry mean by the 'department of KNOW'?

She contrasts the old CISO identity — the 'department of NO,' defined by restriction and gatekeeping — with a new model where security leaders are expected to provide knowledge, strategic guidance, and informed enablement across the organization.

Why does Mookencherry say CISOs must be cultural leaders?

Because the environment CISOs operate in is changing across multiple dimensions simultaneously — threats, politics, and organizational culture — requiring security leaders to influence behavior and build alignment, not just manage technology.

Categories:

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

Harnessing Data Governance for AI with Cyera and Snowflake