The search team uses the completed brief to separate adjacent familiarity from work the candidate owned. Each interviewer should use the same scenario, record the evidence provided, and score the answer against the responsibilities agreed during intake.
Chief Information Security Officer: Role-specific scope
Screened for enterprise security strategy, executive risk decisions, governance, regulatory accountability, incident leadership, organizational capability, budget, and board communication, with the boundary set by the employer's systems, delivery stage, and operating model.
Interview prompt: Ask for one decision involving Enterprise Risk, Security Strategy, Governance. Record the constraint, what the candidate owned, and the evidence used to evaluate the result.
Brief alignment: Define the systems, delivery stage, operating boundary, and ownership expected from the Chief Information Security Officer
Deputy CISO: Ownership checkpoints
Screened for enterprise security strategy, executive risk decisions, governance, regulatory accountability, incident leadership, organizational capability, budget, and board communication, with the boundary set by the employer's systems, delivery stage, and operating model.
Interview prompt: Ask for one decision involving enterprise security strategy, executive risk decisions, governance. Record the constraint, what the candidate owned, and the evidence used to evaluate the result.
Brief alignment: Screen candidates for evidence of enterprise security strategy, executive risk decisions, governance, regulatory accountability, incident leadership, organizational capability, budget, and board communication
Virtual CISO: Adjacent role boundaries
Screened for enterprise security strategy, executive risk decisions, governance, regulatory accountability, incident leadership, organizational capability, budget, and board communication, with the boundary set by the employer's systems, delivery stage, and operating model.
Interview prompt: Ask for one decision involving Chief Information Security Officer, Deputy CISO, Virtual CISO. Record the constraint, what the candidate owned, and the evidence used to evaluate the result.
Brief alignment: Separate direct delivery experience from adjacent product, project, or consulting exposure