As dependency on and integration of technology increases, information security leaders are inheriting the responsibility of serving as change ambassadors. Whether it is managing through risk-based governance, maturing security capabilities or determining how security can be communicated effectively, CISOs are vital in creating continued business value. John Johnson defi nes areas of impact and accountability for security leaders and introduces specific action steps to establish the role of the security organization in transforming companies from mediocre to world class.