5 CISO Principles for Navigating Cybersecurity Incident Disclosure
InformationWeek, Thursday, August 6th, 2026
CISOs should establish incident notification protocols before crises, prioritizing harm reduction over polished narratives.
Security leaders must prepare customer notification strategies during peacetime rather than amid active incidents, according to Zscaler CISO Sam Curry.
Key principles include letting harm reduction drive timing decisions, treating legal obligations as forcing functions, and giving customers actionable intelligence rather than a polished narrative.
Decision rights, escalation paths, and communication cadences should be established in advance through cross-functional work with legal, communications, and business leaders. The approach emphasizes tight facts with clear caveats and empathetic professionalism over overconfident statements.