About 20 years ago I quite liked the idea of becoming a CISO - the CIO I worked for at the time talked me out of it - saying that the role would largely involve being ignored then, when something inevitably did go wrong, you'd get sacked.