---
title: "Most CISOs Don’t Have a Capability Gap: They Have an Influence Gap"
description: "CISO leadership problem: Most CISOs are highly capable but lack influence. Discover why technical expertise alone fails to drive organisational impact."
image: https://donovanleadership.com/hubfs/ciso-influence-gap-v2.png
---

[Skip to content](https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap#main-content)

![cropped-DON_LongRGB01](https://donovanleadership.com/hs-fs/hubfs/cropped-DON_LongRGB01.jpg?width=886&height=247&name=cropped-DON_LongRGB01.jpg)

- [Home](https://donovanleadership.com/)
- [Coaching](https://donovanleadership.com/executive-coaching-transform-your-leadership-style-donovan-leadership)
  
  Show submenu for Coaching 
  
    - [One on One Coaching](https://donovanleadership.com/one-on-one-coaching)
    - [Group Coaching](https://donovanleadership.com/group-coaching)
- [Blog](https://donovanleadership.com/blog)
  
  Show submenu for Blog 
  
    - [All Posts](https://donovanleadership.com/blog)
    - [Research](https://donovanleadership.com/blog/tag/research)
- [Books](https://donovanleadership.com/books)
- [About](https://donovanleadership.com/about)
  
  Show submenu for About 
  
    - [Contact Us](https://donovanleadership.com/contact)

Open main navigation

Close main navigation

- [Home](https://donovanleadership.com/)
- [Coaching](https://donovanleadership.com/executive-coaching-transform-your-leadership-style-donovan-leadership)
  
  Show submenu for Coaching 
  
    - [One on One Coaching](https://donovanleadership.com/one-on-one-coaching)
    - [Group Coaching](https://donovanleadership.com/group-coaching)
- [Blog](https://donovanleadership.com/blog)
  
  Show submenu for Blog 
  
    - [All Posts](https://donovanleadership.com/blog)
    - [Research](https://donovanleadership.com/blog/tag/research)
- [Books](https://donovanleadership.com/books)
- [About](https://donovanleadership.com/about)
  
  Show submenu for About 
  
    - [Contact Us](https://donovanleadership.com/contact)
- [Influence Curve Quiz](https://influence-curve.lovable.app/)

[Influence Curve Quiz](https://influence-curve.lovable.app/)

 May 7, 2026, 5:38:59 PM

# Most CISOs Don’t Have a Capability Gap: They Have an Influence Gap

[Brian Donovan](https://donovanleadership.com/blog/author/brian-donovan)

Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap) [Twitter icon](https://twitter.com/intent/tweet?url=https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap) [envelope icon](mailto:?body=https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap)

 

There was no such thing as a CFO until the 1970s.

Before that, there was a financial manager. They were accurate, reliable, and largely absent from strategic decisions.

Then business got more complex: regulation, inflation, M&A, shareholder pressure.

Boards didn’t need better accountants.

They needed someone who could translate complexity into decisions, frame risk in terms a CEO could act on, and build the relationships that moved capital.

The CFO wasn’t an upgrade. It was a different kind of leader.

That distinction matters because the word chief signals something more specific: enterprise-wide accountability, influence across functions, proximity to consequential decisions, and the authority to shape organisational direction.

Historically, finance leaders were valued for control, accuracy, and stewardship. But as capital markets became more complex in the 1970s and 1980s, the CFO role evolved from operational finance management into a **[strategic executive position](https://journals.sagepub.com/doi/10.1177/000312240406900302)** focused on capital allocation, shareholder value, and corporate direction.

Earlier CFOs were often viewed as tactical “bean-counting” operators. Today, the role is expected to help shape **[enterprise direction](https://knowledge.wharton.upenn.edu/article/the-changing-role-of-the-cfo)**, influence strategy, lead transformation, and communicate risk and performance in terms the board and CEO can act on. It is increasingly a role defined by **[lead transformation](https://www.mckinsey.com/capabilities/strategy-and-corporate-finance/our-insights/todays-cfo-which-profile-best-suits-your-company)** rather than simply manage reporting.

“Chief” came to imply stewardship not just of a function, but of organisational outcomes.

The CISO is going through a similar shift.

But many are still operating in an earlier version of the role.

Yes structure matters. Many CISOs don’t control budget, don’t always sit close to the board, and are still positioned as technical leaders.

But expectations have already moved.

The Hitch Partners 2026 Global CISO Benchmark Report found that **[69% of CISOs](https://www.hitchpartners.com/ciso-survey-results-26)** now justify security budgets through business impact, overtaking the 49% who still lead with compliance avoidance. The framing has shifted from "cost of doing business" to "enabler of business outcomes."

The signal is clear.

You can see the gap in practice:  
– Risk is understood, but not prioritised  
– Funding is agreed, but not sustained  
– A breach happens, and decisions happen around you

In most organisations, none of these are visibility problems. They are influence problems that show up differently depending on the leader.

And most leaders don’t see the gap, until it appears in decisions they’re not part of.

This is the shift: not more technical depth, but a different kind of leadership.

Because “chief” increasingly implies the ability to:

- Shape enterprise priorities, not just functional activity
- Translate specialist risk into business trade-offs
- Influence decisions without relying on formal authority
- Build alignment across competing executive agendas
- Carry credibility beyond your technical domain

That is fundamentally different from being the organisation’s most knowledgeable security practitioner. And most leaders are never explicitly shown what that shift looks like in practice.

It requires a measurable shift in how influence is built, applied, and expanded over time.

The **[Influence Curve](https://influence-curve.lovable.app?utm_source=blog&utm_medium=website&utm_campaign=influence_curve_quiz&utm_content=ciso-influence-gap-midpost)** shows your current level of influence and where it needs to be if the role continues to move in the direction it is already going.

If you had to choose: what’s the one non-technical capability that would change your impact in the next 12 months?

**[Take the Influence Curve Assessment](https://influence-curve.lovable.app?utm_source=blog&utm_medium=website&utm_campaign=influence_curve_quiz&utm_content=ciso-influence-gap-cta)** It takes two minutes and shows you exactly where your influence sits today, and what the shift to "chief" actually requires.

**Best regards, Brian**

 

[influence curve](https://donovanleadership.com/blog/tag/influence-curve), [technology leadership](https://donovanleadership.com/blog/tag/technology-leadership), [cybersecurity leadership](https://donovanleadership.com/blog/tag/cybersecurity-leadership), [CISO leadership](https://donovanleadership.com/blog/tag/ciso-leadership)

## Related posts

[![Why CISO stress is less about technology and more about leading people.](https://donovanleadership.com/hs-fs/hubfs/ciso-stress-stat-1200x628.png?height=200&name=ciso-stress-stat-1200x628.png)](https://donovanleadership.com/blog/the-most-stressful-job-in-the-corporate-world-may-be-an-influence-problem)

[influence curve](https://donovanleadership.com/blog/tag/influence-curve), [Transactional Intelligence™](https://donovanleadership.com/blog/tag/transactional-intelligence), [cybersecurity leadership](https://donovanleadership.com/blog/tag/cybersecurity-leadership)

## [The most stressful job in the corporate world may be an influence problem](https://donovanleadership.com/blog/the-most-stressful-job-in-the-corporate-world-may-be-an-influence-problem)

[Brian Donovan](https://donovanleadership.com/blog/author/brian-donovan) 

 Jul 1, 2026, 4:09:32 PM

Few roles carry as much stress as the chief information security officer's, and a recent ACS...

[Read more](https://donovanleadership.com/blog/the-most-stressful-job-in-the-corporate-world-may-be-an-influence-problem)

[![Michael Piacente](https://donovanleadership.com/hs-fs/hubfs/Michael%20Piacente.jpeg?height=200&name=Michael%20Piacente.jpeg)](https://donovanleadership.com/blog/leaders-learn-how-to-collaborate-and-seek-help)

[The Gentle Art of Leadership](https://donovanleadership.com/blog/tag/the-gentle-art-of-leadership), [CISOs](https://donovanleadership.com/blog/tag/cisos)

## [Leaders learn how to collaborate and seek help](https://donovanleadership.com/blog/leaders-learn-how-to-collaborate-and-seek-help)

[Brian Donovan](https://donovanleadership.com/blog/author/brian-donovan) 

 Jul 17, 2025, 5:00:00 PM

[Read more](https://donovanleadership.com/blog/leaders-learn-how-to-collaborate-and-seek-help)

[![](https://donovanleadership.com/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20sleek%20modern%20conference%20room%20bathed%20in%20soft%20ambient%20light%20A%20long%20polished%20wooden%20table%20occupies%20the%20center%20surrounded%20by%20ergonomic%20chairs%20At%20one%20end%20of%20the%20table%20a%20large%20screen%20displays%20the%20title%20Big%20Kahuna%20Leadership%20Survey%20with-1.jpeg?height=200&name=The%20image%20depicts%20a%20sleek%20modern%20conference%20room%20bathed%20in%20soft%20ambient%20light%20A%20long%20polished%20wooden%20table%20occupies%20the%20center%20surrounded%20by%20ergonomic%20chairs%20At%20one%20end%20of%20the%20table%20a%20large%20screen%20displays%20the%20title%20Big%20Kahuna%20Leadership%20Survey%20with-1.jpeg)](https://donovanleadership.com/blog/big-kahuna-leadership-survey-the-chief-information-security-officer-1)

[Research](https://donovanleadership.com/blog/tag/research)

## [Big Kahuna Leadership Survey – The Chief Information Security Officer](https://donovanleadership.com/blog/big-kahuna-leadership-survey-the-chief-information-security-officer-1)

[Brian Donovan](https://donovanleadership.com/blog/author/brian-donovan) 

 Jul 2, 2018, 2:00:00 PM

Brian Donovan at Donovan Leadership conducts a regular research program known as the Big Kahuna...

[Read more](https://donovanleadership.com/blog/big-kahuna-leadership-survey-the-chief-information-security-officer-1)

[facebook-f icon](https://www.facebook.com/DonovanLeadership/) [linkedin-in icon](https://www.linkedin.com/in/brianfdonovan1/) [Twitter icon](https://x.com/Briandonovan1)

- [Privacy Policy](https://donovanleadership.com/privacy-policy)
- [Disclaimer](https://donovanleadership.com/disclaimer)
- [Contact Us](https://donovanleadership.com/contact)

---

PO Box 536 Camberwell  
VICTORIA, 3124  
Australia

[![Donovan Leadership](https://donovanleadership.com/hs-fs/hubfs/Imported_Blog_Media/cropped-cropped-DON_LongRGB01-Apr-17-2025-10-42-20-2134-PM-Jun-18-2025-10-42-41-2821-AM.jpg?width=886&height=236&name=cropped-cropped-DON_LongRGB01-Apr-17-2025-10-42-20-2134-PM-Jun-18-2025-10-42-41-2821-AM.jpg "Donovan Leadership")](https://donovanleadership.com/)

Copyright © 2025,

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Brian Donovan",
    "url" : "https://donovanleadership.com/blog/author/brian-donovan"
  },
  "dateModified" : "2026-05-07T08:14:57.816Z",
  "datePublished" : "2026-05-07T07:38:59.000Z",
  "headline" : "Most CISOs Don’t Have a Capability Gap: They Have an Influence Gap",
  "image" : [ "https://donovanleadership.com/hubfs/ciso-influence-gap-v2.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://donovanleadership.com/blog/most-cisos-dont-have-a-capability-gap-they-have-an-influence-gap",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://donovanleadership.com/hubfs/Imported_Blog_Media/cropped-cropped-DON_LongRGB01-Apr-17-2025-10-42-20-2134-PM-Jun-18-2025-10-42-41-2821-AM.jpg"
    },
    "name" : "Donovan Leadership"
  }
}
```