The role of the Chief Information Security Officer (CISO) has notably changed since the COVID-19 pandemic. According to Dale Heath, Technology Lead at Rubrik A/NZ, “A holistic security approach – combining infrastructure, cloud and data security (or end-to-end Zero Trust security) – is required to help keep an organisation safe.” “This means bringing together prevention, detection and investigation as well as ensuring data resilience, data observability and data recovery.” The next plan of action is to go passwordless. The industry is on the cusp of replacing passwords and legacy Multi-Factor Authentication (MFA) methods with modern open authentication standards, like FIDO2. These standards will enable widespread adoption of phishing-resistant and usable security, and hopefully, will be able to help CISOs to eradicate an entire class of issues that have long been associated with passwords.