Pathways to, and beyond, the role of Chief Security Officer
Dr. Mike Blyth, DBA

Thank you for participating in this survey, your feedback is important. This survey is for professionals holding executive level positions in the fields of security, risk, resilience, business continuity, or crisis management.

Over the past 20 years the role of security has evolved significantly, moving from a focus on physical security (protecting people, assets, facilities, and operations) to now also protecting business continuity, information, profitability (margins), business growth and new market entry, and organizational brand. As such, those leading ‘resilience’ responsibilities (aka a Chief Security Officer / CSO or Risk Manager) now hold a pivotal role in organizational success.

My name is Dr. Mike Blyth, DBA. I am conducting research into how professionals reach the position of CSO (or similar), how important the role is viewed from within the organization, and what makes the role successful. The research seeks to define pathways for professional growth for both a CSO / Risk Manager and those aspiring to the CSO / Risk Manager position.

Participation is voluntary and your contributions will be held in confidence, unless you explicitly indicate that you would like to be named in the research findings. The research seeks both quantitative (scoring) and qualitative (narrative) contributions, with findings being published in academic journals and professional magazines.

If you would like to offer formal quote(s), please limit these to 25 - 50 words written in a manner which can be directly cited in a magazine or journal article. You can remain anonymous or you can include your name, position, and organization and be formally recognized in the findings.

This survey should take 10-20 minutes. Please feel free to share this survey within your peer group.
Free accredited micro-online training on key resilience topics is provided for those supporting this research.
Please email me for access to the free online training or links to the research articles at: Mike.Blyth@S7risk.com.

Note: The term ‘resilience’ in this survey is used to cover all aspects of security, risk, resilience, business continuity, and incident / crisis management.

Question Title

1. How long have you been working in the field of "resilience" (aka security, risk, business continuity or incident/crisis management)

5 - 10 years

10 - 15 years

15 - 20 years

20 - 25 years

25 + years

Question Title

2. What title most closely matches your role / position

Chief Security Officer (CSO)

Head of resilience / business continuity management

Head of incident / crisis management

Head of risk management

Question Title

3. Did you have a previous career outside of the commercial 'resilience' field

Military

Police

Intelligence

Emergency services

Other government agencies

Academia

Other (please specify)

Question Title

4. Please indicate what academic or vocational qualifications you hold

Doctorate or PhD

Masters or MBA

Bachelors or Associates

University or government accredited vocational qualification

Forum or association certified vocational qualification

Question Title

5. How effective and accessible was the structure and resources for your transition from a first (primary) career into the field of 'resilience'

Excellent structure, support, and resources

Strong structure, support, and resources

Good structure, support, and resources

Adequate structure, support, and resources

Weak or no structure, support, and resources

Comments or quotes...

Question Title

6. How much of your role is focused on security risk management (physical protection of people, assets, facilities, and operations) compared to broader resilience responsibilities (business enablement, resilience and business continuity, profit protection, information security, and safeguarding reputation and brand)

100% focus on security risk management

80% focus on security risk management and 20% focus on broader resilience responsibilities

60% focus on security risk management and 40% focus on broader resilience responsibilities

40% focus on security risk management and 60% focus on broader resilience responsibilities

20% focus on security risk management and 80% focus on broader resilience responsibilities

100% focus on broader resilience responsibilities

Comments or quotes...

Question Title

7. Rank the importance of the following areas of knowledge, skill, and experience for your role

	Critically important	Very important	Some importance	Limited importance	No importance
Security risk management	Security risk management Critically important	Security risk management Very important	Security risk management Some importance	Security risk management Limited importance	Security risk management No importance
Risk, resilience, and business continuity	Risk, resilience, and business continuity Critically important	Risk, resilience, and business continuity Very important	Risk, resilience, and business continuity Some importance	Risk, resilience, and business continuity Limited importance	Risk, resilience, and business continuity No importance
Intelligence and threat analysis	Intelligence and threat analysis Critically important	Intelligence and threat analysis Very important	Intelligence and threat analysis Some importance	Intelligence and threat analysis Limited importance	Intelligence and threat analysis No importance
Business management, administration, and development	Business management, administration, and development Critically important	Business management, administration, and development Very important	Business management, administration, and development Some importance	Business management, administration, and development Limited importance	Business management, administration, and development No importance
Finance and profitability (company margins)	Finance and profitability (company margins) Critically important	Finance and profitability (company margins) Very important	Finance and profitability (company margins) Some importance	Finance and profitability (company margins) Limited importance	Finance and profitability (company margins) No importance
Legal, compliance, and contracts	Legal, compliance, and contracts Critically important	Legal, compliance, and contracts Very important	Legal, compliance, and contracts Some importance	Legal, compliance, and contracts Limited importance	Legal, compliance, and contracts No importance
Operations and property / asset risk management	Operations and property / asset risk management Critically important	Operations and property / asset risk management Very important	Operations and property / asset risk management Some importance	Operations and property / asset risk management Limited importance	Operations and property / asset risk management No importance
Human resource management	Human resource management Critically important	Human resource management Very important	Human resource management Some importance	Human resource management Limited importance	Human resource management No importance
Communications and media	Communications and media Critically important	Communications and media Very important	Communications and media Some importance	Communications and media Limited importance	Communications and media No importance
Information and IT / Technology	Information and IT / Technology Critically important	Information and IT / Technology Very important	Information and IT / Technology Some importance	Information and IT / Technology Limited importance	Information and IT / Technology No importance

Comments or quotes...

Question Title

8. How important is real-world "experience" compared to technical knowledge in your field

Critically important

Very important

Some importance

Limited importance

No importance

Comments or quotes...

Question Title

9. Some areas of competence require experience to operationalize and contextualize technical knowledge - - - how easy is it to gain new areas of experienced-based knowledge to help you (or others) professionally progress

Very easy to access experienced-based knowledge resources or opportunities to learn

Relatively easy to access experienced-based knowledge resources or opportunities to learn

Difficult to access experienced-based knowledge resources or opportunities to learn

Very difficult to access experienced-based knowledge resources or opportunities to learn

Impossible to access experienced based knowledge resources or opportunities to learn

Comments or quotes...

Question Title

10. Do you think senior resilience roles need to have high levels of competence in fields outside of security

	Critically important	Very important	Some importance	Limited importance	No importance
Business	Business Critically important	Business Very important	Business Some importance	Business Limited importance	Business No importance
Finance	Finance Critically important	Finance Very important	Finance Some importance	Finance Limited importance	Finance No importance
Legal / compliance / contracts	Legal / compliance / contracts Critically important	Legal / compliance / contracts Very important	Legal / compliance / contracts Some importance	Legal / compliance / contracts Limited importance	Legal / compliance / contracts No importance
Crisis communications	Crisis communications Critically important	Crisis communications Very important	Crisis communications Some importance	Crisis communications Limited importance	Crisis communications No importance
IT and technology	IT and technology Critically important	IT and technology Very important	IT and technology Some importance	IT and technology Limited importance	IT and technology No importance
Project management	Project management Critically important	Project management Very important	Project management Some importance	Project management Limited importance	Project management No importance
Verbal communications	Verbal communications Critically important	Verbal communications Very important	Verbal communications Some importance	Verbal communications Limited importance	Verbal communications No importance
Written skills	Written skills Critically important	Written skills Very important	Written skills Some importance	Written skills Limited importance	Written skills No importance
Formal presentational skills	Formal presentational skills Critically important	Formal presentational skills Very important	Formal presentational skills Some importance	Formal presentational skills Limited importance	Formal presentational skills No importance
Marketing and media	Marketing and media Critically important	Marketing and media Very important	Marketing and media Some importance	Marketing and media Limited importance	Marketing and media No importance

Comments or quotes...

Question Title

11. Rank the importance of what makes you effective and positioned to influence your organization

	Critically important	Very important	Some importance	Limited importance	No importance
Credibility derived from your original (first) career	Credibility derived from your original (first) career Critically important	Credibility derived from your original (first) career Very important	Credibility derived from your original (first) career Some importance	Credibility derived from your original (first) career Limited importance	Credibility derived from your original (first) career No importance
Executive leadership support in your position's mandate	Executive leadership support in your position's mandate Critically important	Executive leadership support in your position's mandate Very important	Executive leadership support in your position's mandate Some importance	Executive leadership support in your position's mandate Limited importance	Executive leadership support in your position's mandate No importance
Your personal brand and credibility	Your personal brand and credibility Critically important	Your personal brand and credibility Very important	Your personal brand and credibility Some importance	Your personal brand and credibility Limited importance	Your personal brand and credibility No importance
Your acacdemic qualifications	Your acacdemic qualifications Critically important	Your acacdemic qualifications Very important	Your acacdemic qualifications Some importance	Your acacdemic qualifications Limited importance	Your acacdemic qualifications No importance
Your vocational qualifications	Your vocational qualifications Critically important	Your vocational qualifications Very important	Your vocational qualifications Some importance	Your vocational qualifications Limited importance	Your vocational qualifications No importance

Comments or quotes...

Question Title

12. Does your organization shape the resilience approach... or do you and members of your team shape organizational resilience

The organization defines the resilience strategy

An equal blend of the organization defining the resilience strategy and individuals enhancing this strategy

It is largely individuals who shape the organizational resilience strategy

Individuals are 100% responsible for shaping the resilience approach

Comments or quotes...

Question Title

13. Rank the importance placed (by your organization or the broader resilience community) on the following academic and vocational qualifications - whether mandated for your position or perceived to have value

	Exceptional value	Significant value	Some value	Low value	No value
PhD / doctorate	PhD / doctorate Exceptional value	PhD / doctorate Significant value	PhD / doctorate Some value	PhD / doctorate Low value	PhD / doctorate No value
MBA or Masters degree	MBA or Masters degree Exceptional value	MBA or Masters degree Significant value	MBA or Masters degree Some value	MBA or Masters degree Low value	MBA or Masters degree No value
Bachelors or Associates degree	Bachelors or Associates degree Exceptional value	Bachelors or Associates degree Significant value	Bachelors or Associates degree Some value	Bachelors or Associates degree Low value	Bachelors or Associates degree No value
Accredited vocational qualification	Accredited vocational qualification Exceptional value	Accredited vocational qualification Significant value	Accredited vocational qualification Some value	Accredited vocational qualification Low value	Accredited vocational qualification No value
Forum or association approved qualification	Forum or association approved qualification Exceptional value	Forum or association approved qualification Significant value	Forum or association approved qualification Some value	Forum or association approved qualification Low value	Forum or association approved qualification No value

Comments or quotes...

Question Title

14. Do academic qualifications need to be specifically focused on 'resilience' related fields, or are unrelated fields of study beneficial for professional advancement

Academic qualifications must be directly related to security or resilience

It is useful for academic qualifications to be security or resilience related

It is not relevant what field of study the academic qualification relates to

Alternative fields of study offer advantages over security and resilience

There is a very strong advantage to pursue academic studies outside of security and resilience

Comments or quotes...

Question Title

15. If you had a higher level academic degree or vocational qualifications do you think this would help you advance in - or past - your role

	Critical value for credibility or promotion	Significant value for credibility or promotion	Some value for credibility or promotion	Limited value for credibility or promotion	No value for credibility or promotion
PhD or Doctorate	PhD or Doctorate Critical value for credibility or promotion	PhD or Doctorate Significant value for credibility or promotion	PhD or Doctorate Some value for credibility or promotion	PhD or Doctorate Limited value for credibility or promotion	PhD or Doctorate No value for credibility or promotion
Masters	Masters Critical value for credibility or promotion	Masters Significant value for credibility or promotion	Masters Some value for credibility or promotion	Masters Limited value for credibility or promotion	Masters No value for credibility or promotion
MBA	MBA Critical value for credibility or promotion	MBA Significant value for credibility or promotion	MBA Some value for credibility or promotion	MBA Limited value for credibility or promotion	MBA No value for credibility or promotion
University or government accredited vocational qualifications	University or government accredited vocational qualifications Critical value for credibility or promotion	University or government accredited vocational qualifications Significant value for credibility or promotion	University or government accredited vocational qualifications Some value for credibility or promotion	University or government accredited vocational qualifications Limited value for credibility or promotion	University or government accredited vocational qualifications No value for credibility or promotion
Forum or association certified vocational qualifications	Forum or association certified vocational qualifications Critical value for credibility or promotion	Forum or association certified vocational qualifications Significant value for credibility or promotion	Forum or association certified vocational qualifications Some value for credibility or promotion	Forum or association certified vocational qualifications Limited value for credibility or promotion	Forum or association certified vocational qualifications No value for credibility or promotion

Comments or quotes...

Question Title

16. Are forums and associations important in supporting personal and professional growth and advancement

Critically important

Very important

Some importance

Limited importance

No importance

Comments or quotes (please name forums and associations of value)

Question Title

17. What are the main barriers for advancing your professional knowledge and qualifications

	Impossible barrier(s)	Significant barrier(s)	Very difficult barrier(s)	Difficult barrier(s)	Minor barrier(s)
Time and bandwidth constraints	Time and bandwidth constraints Impossible barrier(s)	Time and bandwidth constraints Significant barrier(s)	Time and bandwidth constraints Very difficult barrier(s)	Time and bandwidth constraints Difficult barrier(s)	Time and bandwidth constraints Minor barrier(s)
Employer interest and support	Employer interest and support Impossible barrier(s)	Employer interest and support Significant barrier(s)	Employer interest and support Very difficult barrier(s)	Employer interest and support Difficult barrier(s)	Employer interest and support Minor barrier(s)
Cost (money)	Cost (money) Impossible barrier(s)	Cost (money) Significant barrier(s)	Cost (money) Very difficult barrier(s)	Cost (money) Difficult barrier(s)	Cost (money) Minor barrier(s)
Knowledge of suitable resources	Knowledge of suitable resources Impossible barrier(s)	Knowledge of suitable resources Significant barrier(s)	Knowledge of suitable resources Very difficult barrier(s)	Knowledge of suitable resources Difficult barrier(s)	Knowledge of suitable resources Minor barrier(s)
Access to suitable resources	Access to suitable resources Impossible barrier(s)	Access to suitable resources Significant barrier(s)	Access to suitable resources Very difficult barrier(s)	Access to suitable resources Difficult barrier(s)	Access to suitable resources Minor barrier(s)

Comments and quotes...

Question Title

18. How important do YOU think the role of "resilience" is to an organization's overall business success, outside of the pure physical security field

Critically important

Very important

Important

Limited importance

No importance

Comments and quotes...

Question Title

19. How important does YOUR ORGANIZATION think the role of "resilience" is to an organization's overall business success, outside of the pure physical security field

Critically important

Very important

Important

Limited importance

No importance

Comments and quotes...

Question Title

20. How well resourced (staffing, assets, and budgets) are resilience requirements in your organization

Excellently resourced

Very well resourced

Well resourced

Limited resourced

Weak or no resources

Comments and quotes...

Question Title

21. What value do YOU think there is in being published in an industry magazine, academic journal, or 3rd party (not self-published) book

	Incredibly valuable	Very valuable	Some value	Limited value	No value
Professional industry magazines	Professional industry magazines Incredibly valuable	Professional industry magazines Very valuable	Professional industry magazines Some value	Professional industry magazines Limited value	Professional industry magazines No value
Academic peer reviewed journals	Academic peer reviewed journals Incredibly valuable	Academic peer reviewed journals Very valuable	Academic peer reviewed journals Some value	Academic peer reviewed journals Limited value	Academic peer reviewed journals No value
Books	Books Incredibly valuable	Books Very valuable	Books Some value	Books Limited value	Books No value

Comments and quotes...

Question Title

22. Are you published in a magazine, journal, or book

	Yes	No
Industry magazine	Industry magazine Yes	Industry magazine No
Academic peer reviewed journal	Academic peer reviewed journal Yes	Academic peer reviewed journal No
Book	Book Yes	Book No

Question Title

23. If you had the opportunity would you like to be published in a magazine or journal

	Yes	No
Industry magazine	Industry magazine Yes	Industry magazine No
Academic journal	Academic journal Yes	Academic journal No

Comments and quotes

Pathways to, and beyond, the role of Chief Security OfficerDr. Mike Blyth, DBA

Question Title

* 1. How long have you been working in the field of "resilience" (aka security, risk, business continuity or incident/crisis management)

Question Title

* 2. What title most closely matches your role / position

Question Title

* 3. Did you have a previous career outside of the commercial 'resilience' field

Question Title

* 4. Please indicate what academic or vocational qualifications you hold

Question Title

* 5. How effective and accessible was the structure and resources for your transition from a first (primary) career into the field of 'resilience'

Question Title

Question Title

* 7. Rank the importance of the following areas of knowledge, skill, and experience for your role

Question Title

* 8. How important is real-world "experience" compared to technical knowledge in your field

Question Title

* 9. Some areas of competence require experience to operationalize and contextualize technical knowledge - - - how easy is it to gain new areas of experienced-based knowledge to help you (or others) professionally progress

Question Title

* 10. Do you think senior resilience roles need to have high levels of competence in fields outside of security

Question Title

* 11. Rank the importance of what makes you effective and positioned to influence your organization

Question Title

* 12. Does your organization shape the resilience approach... or do you and members of your team shape organizational resilience

Question Title

* 13. Rank the importance placed (by your organization or the broader resilience community) on the following academic and vocational qualifications - whether mandated for your position or perceived to have value

Question Title

* 14. Do academic qualifications need to be specifically focused on 'resilience' related fields, or are unrelated fields of study beneficial for professional advancement

Question Title

* 15. If you had a higher level academic degree or vocational qualifications do you think this would help you advance in - or past - your role

Question Title

* 16. Are forums and associations important in supporting personal and professional growth and advancement

Question Title

* 17. What are the main barriers for advancing your professional knowledge and qualifications

Question Title

* 18. How important do YOU think the role of "resilience" is to an organization's overall business success, outside of the pure physical security field

Question Title

* 19. How important does YOUR ORGANIZATION think the role of "resilience" is to an organization's overall business success, outside of the pure physical security field

Question Title

* 20. How well resourced (staffing, assets, and budgets) are resilience requirements in your organization

Question Title

* 21. What value do YOU think there is in being published in an industry magazine, academic journal, or 3rd party (not self-published) book

Question Title

* 22. Are you published in a magazine, journal, or book

Question Title

* 23. If you had the opportunity would you like to be published in a magazine or journal

Pathways to, and beyond, the role of Chief Security Officer
Dr. Mike Blyth, DBA

1. How long have you been working in the field of "resilience" (aka security, risk, business continuity or incident/crisis management)

2. What title most closely matches your role / position

3. Did you have a previous career outside of the commercial 'resilience' field

4. Please indicate what academic or vocational qualifications you hold

5. How effective and accessible was the structure and resources for your transition from a first (primary) career into the field of 'resilience'

7. Rank the importance of the following areas of knowledge, skill, and experience for your role

8. How important is real-world "experience" compared to technical knowledge in your field

9. Some areas of competence require experience to operationalize and contextualize technical knowledge - - - how easy is it to gain new areas of experienced-based knowledge to help you (or others) professionally progress

10. Do you think senior resilience roles need to have high levels of competence in fields outside of security

11. Rank the importance of what makes you effective and positioned to influence your organization

12. Does your organization shape the resilience approach... or do you and members of your team shape organizational resilience

13. Rank the importance placed (by your organization or the broader resilience community) on the following academic and vocational qualifications - whether mandated for your position or perceived to have value

14. Do academic qualifications need to be specifically focused on 'resilience' related fields, or are unrelated fields of study beneficial for professional advancement

15. If you had a higher level academic degree or vocational qualifications do you think this would help you advance in - or past - your role

16. Are forums and associations important in supporting personal and professional growth and advancement

17. What are the main barriers for advancing your professional knowledge and qualifications

18. How important do YOU think the role of "resilience" is to an organization's overall business success, outside of the pure physical security field

19. How important does YOUR ORGANIZATION think the role of "resilience" is to an organization's overall business success, outside of the pure physical security field

20. How well resourced (staffing, assets, and budgets) are resilience requirements in your organization

21. What value do YOU think there is in being published in an industry magazine, academic journal, or 3rd party (not self-published) book

22. Are you published in a magazine, journal, or book

23. If you had the opportunity would you like to be published in a magazine or journal