Method

How we work

CISO Spotlights profiles the people who run security programs and studies how they got there. These are the rules every page follows.

Public sources only

Every fact on a profile comes from a page we fetched and read when the profile was drafted: the employer’s own announcement or leadership biography, a regulator or government page, or established trade and business press. We list each source with its publisher and the date it was published, and we mark its tier (A for the organization or a government body, B for established press). We do not scrape LinkedIn or any social network, and we never write from memory.

Professional facts only

A profile covers roles, dates, employers, responsibilities, board seats, published work and public talks. Education appears only when an official biography states it. We do not publish family details, health, age, home location or pay, and we do not use photographs: the portraits on this site are monograms. When something is not in the sources, the profile says so rather than guessing.

Current means recently confirmed

We call a role current only when a source less than 18 months old supports it. Otherwise the profile reports the role as of the date of its most recent source. Earlier roles are labelled as former.

Quotes and dates

Quotations are copied word for word from a cited page, kept short and attributed. The published date on each page is the day it first went live on this site. Profiles that describe earlier events say they were compiled from public records on that date.

How AI is used

Drafting and checking are assisted by AI. An automated pipeline selects people from the CISO Tribune record, searches for official sources, drafts a profile under these rules, and then re-reads every source to confirm that each supporting passage appears on the page it is attributed to. A separate gate checks dates, sourcing, length, banned phrasing and duplication across the whole network before anything can publish. Anything that touches an exit, a dispute or a person’s reputation waits for a human editor.

Corrections and removal

Anyone can report an error, and the person profiled can ask for their profile to be removed. See corrections and removal for how requests are handled.

Who we are

CISO Spotlights is part of the CISO Tribune network. CISO Tribune keeps the record of who holds each security seat; this site holds the longer career stories. Pages are bylined to the CISO Spotlights Desk.