712-50 Question 163
Single answerEmotional IntelligenceA newly appointed CISO is leading a security transformation that includes tighter privileged access controls and mandatory incident escalation procedures. Several senior IT managers openly resist the changes, saying the new controls show a lack of trust and will slow operations. In meetings, tension rises quickly, and one influential manager has started bypassing governance forums and lobbying the COO directly. The CISO wants to preserve executive support, reduce resistance, and keep the program on track. Which action would BEST demonstrate effective emotional intelligence in this situation?
- A
Privately meet with the resistant managers to understand their concerns, acknowledge operational pressures, and reframe the controls in terms of shared business goals before adjusting communication and rollout tactics
- B
Send a formal memo reminding managers that security policy is mandatory and that continued resistance will be escalated as noncompliance to the CEO
- C
Delay the initiative until all managers fully agree with the approach, since emotional buy-in must be achieved before any control changes are implemented
- D
Publicly challenge the most resistant manager in the next steering committee meeting to demonstrate leadership authority and deter further opposition
Show answer and explanation
Correct answer: A
Explanation
At the CCISO level, emotional intelligence is not a soft skill detached from governance; it is a leadership capability that directly affects the success of strategy execution, stakeholder alignment, and enterprise risk reduction. In this scenario, the core problem is not merely policy noncompliance but resistance driven by perceived loss of autonomy, trust concerns, and operational anxiety. The best response is to use empathy and social awareness to understand those concerns, then apply relationship management to reframe the initiative around shared objectives such as resilience, accountability, auditability, and business continuity. This aligns with established executive leadership and change-management practices, including stakeholder engagement, active listening, and tailored communication emphasized in security governance frameworks and management guidance such as NIST CSF governance principles, ISACA governance concepts, and common organizational change practices. Emotional intelligence helps a CISO maintain influence, reduce friction, and achieve adoption without compromising control objectives.
- A. Correct.
Correct. This response reflects core emotional intelligence competencies: self-regulation, empathy, social awareness, and relationship management. The CISO is not abandoning the security objective; instead, they are actively listening to stakeholders, recognizing the emotional drivers behind resistance, and tailoring communication to align security with operational and business outcomes. In executive security leadership, this approach is often the most effective way to reduce defensiveness, maintain trust, and gain durable commitment without weakening governance.
- B. Incorrect.
Incorrect. While policy enforcement is part of leadership, leading with a punitive memo in a politically sensitive situation usually escalates defensiveness and frames the issue as a power struggle rather than a business alignment problem. This option reflects low empathy and weak stakeholder management. A candidate might choose it because escalation can seem decisive, but emotional intelligence requires first understanding concerns and influencing outcomes constructively.
- C. Incorrect.
Incorrect. Emotional intelligence does not mean avoiding discomfort or waiting for unanimous agreement. Security leaders frequently need to move forward despite some resistance, especially when risk reduction is time-sensitive. This option confuses empathy with indecision. A candidate might select it because consensus is desirable, but in practice a CISO must balance inclusion with accountability, timelines, and risk management.
- D. Incorrect.
Incorrect. Publicly confronting a resistant executive may damage relationships, increase political resistance, and shift focus away from the security program to interpersonal conflict. This demonstrates poor self-regulation and weak relationship management. Some may view this as strong leadership, but in most executive environments it undermines influence and trust, especially when cross-functional cooperation is needed for sustained program success.