What lessons does a “new” CISO learn in an oil & gas company? Developing strategic vision and “informed” understanding of current challenges leads to convincing the business to adopt Infosec and a risk-based approach. Explore how to create a more secure environment by building the “right” things (people, processes and technology) capable of both quick wins and strategic delivery.