CISOs are faced with ever increasing requirements in areas of governance, personnel, technology, compliance etc. This presentation reviews leadership strategies which CISOs and InfoSec leaders can adopt to make these onerous requirements more manageable and effective. Opportunities such as DevSecOps and hybrid security delivery models are considered. The aim is to help CISOs differentiate those security topics which are strategic to the organisation and those where other strategies could be implemented.