The role of the CISO has changed. Security leaders are no longer measured solely on their ability to prevent incidents or deploy controls. They are increasingly expected to demonstrate business value, quantify risk reduction and justify security investments to executive leadership and the board. TL;DR – Identity risk is constantly changing, making it difficult for CISOs to prove whether security p...