Is Your Risk Actually Going Down? Here's How to Grade It.
A practical look at measuring the direction of risk, beyond the colors in a risk register.
AVISHAI (AVI) AVIVI · CISO & CIO
Security leadership.
Business clarity.
I make cybersecurity accessible—connecting security, privacy, and AI governance to the decisions that move a business forward.
30+ years of experience. A pragmatic point of view.
EXPERIENCE ACROSS
REGULATED INDUSTRIES
The perspective
Compliance is a milestone.
Security is an ongoing responsibility.
Boards need clarity. Teams need direction. Businesses need security that works in practice. I bring executive judgment and hands-on technical understanding to all three.
How I approach the work →Ideas from the field
Beyond the checklist.
The Illusion of Security—Why Passing an Audit Doesn't Mean You're Safe
Why audit assurance and operational security need to be understood together.
Beyond the Checklist: Rethinking Cybersecurity for a Pragmatic Approach
An introduction to a pragmatic approach that looks beyond compliance checklists.
Press & publications
In the industry conversation.
Selected commentary from my time as SafeBreach CISO, on the decisions behind the headlines.
AI-powered social engineering
On how generative AI expands the channels and sophistication of targeted attacks.
Read at SecurityWeek ↗CISO accountability and executive responsibility
Avi’s paraphrase of President Truman, discussing accountability after the Joe Sullivan verdict.
Read at The Record ↗Preventing accidental data exposure
Lessons from a training spreadsheet containing sensitive customer data, and the case for preventative controls.
Read at CSO Online ↗A conversation is a good place to start