CISO Tribune

Morning edition · Tuesday, October 20, 2026

This morning on the Wire: Tuesday, October 20

1 analysis piece, 1 new guide, 1 updated guide and 24 earlier moves added to the record since yesterday morning.

Covers 09:30 UTC on Monday, October 19 to 09:30 UTC on Tuesday, October 20. Generated Oct 20, 2026, 09:50 UTC.

Every item below was already published on the record and links to its own page. How we work

Analysis

1

Guides

2

  • GuidePublished October 18, 2026

    CISO Accountability: What the Rules Actually Put on the Role

    US disclosure rules put accountability on the company, not a named CISO. EU law goes further, naming the management body itself personally liable. Here is what the SEC's and the EU's own texts say, and what 2026 survey data shows about the gap between being held accountable and being given the authority to match.

  • GuideUpdated October 21, 2026

    CISO Personal Liability: What SEC v. SolarWinds and the Uber Case Actually Decided

    The two cases every personal-liability conversation cites, SEC v. SolarWinds and the Uber Joe Sullivan prosecution, did not end the way most retellings suggest. What the SEC alleged, what a federal judge dismissed, what a jury convicted, and where both cases stand now, sourced to the actual court and SEC documents.

Earlier moves added to the record

24

Announced more than 30 days before they were added; each is dated by its announcement.

August 2026appointment

SMSI appoints Russ Gritzo as Chief Information Security Officer

July 2026appointment

Assail appoints Ken Pfiel as Chief Information Security Officer

July 2026appointment

Bessemer Trust appoints Vikas Bangia as Chief Information Security Officer

July 2026appointment

Clio appoints George Totev as VP of Security and Chief Information Security Officer

July 2026appointment

Howard University appoints Les McCollum II as Chief Information Security Officer

July 2026appointment

Lightedge appoints Robert Yox as Chief Information Security Officer

July 2026appointment

Sierra Orchestration appoints Raymond Winder as Chief Information Security Officer

July 2026appointment

Stock Yards Bank & Trust appoints Joe Harrington as Chief Information Security Officer

June 2026appointment

ChurnZero appoints Michael Kipp as Chief Information Security Officer

June 2026appointment

Evernorth Health Services appoints Adam Sealey as Chief Information Security Officer

June 2026appointment

First American appoints Cyrus Tibbs as Chief Information Security Officer

June 2026appointment

Georgia Southern University appoints Nic Carroll as Chief Information Security Officer

June 2026appointment

IDC appoints Dave McKenna as Chief Information Officer and Chief Information Security Officer

June 2026appointment

Toast appoints Tony Arous as Chief Information Security Officer

June 2026appointment

Tradeweb appoints Ahmed Pasha as Global Chief Information Security Officer

June 2026appointment

USAA appoints Randi Kieffer as Chief Information Security Officer

May 2026appointment

Hugobank appoints Zeeshan Manzoor as Chief Information Security Officer

March 2026appointment

US Department of Defense appoints James 'Aaron' Bishop as Deputy Chief Information Officer (Cybersecurity) and Chief Information Security Officer

August 2026appointment

Australia and New Zealand Banking Group appoints Sandro Bucchianeri as Chief Information Security Officer

August 2026appointment

Sycomp appoints Todd Dekkinga as Chief Information Security Officer

July 2026appointment

Aflac appoints Tera Ladner as Senior Vice President and Global Chief Information Security Officer

July 2026appointment

City of Dallas appoints James L. Wilkinson as Chief Information Security Officer

June 2026appointment

Cylerity appoints Drew McCombs as Chief Technology Officer and Chief Information Security Officer

March 2026appointment

micro1 appoints Kathy Wang as Chief Information Security Officer

Other editions