The Rise of Security Control Management: Secure by Design, Not by Chance

CISO Career and COVID Vaccine Security

In an InfoSec World interview, former Johnson & Johnson CISO Marianne Allison discusses delaying retirement when the company committed to a COVID-19 vaccine. She balanced securing accelerated pharmaceutical pipelines—normally decade-long processes—with protecting a rapidly shifted workforce during the pandemic.

Path Into Leadership

Allison reflects on decades spanning West Point electrical engineering, FBI service, and multiple corporate security leadership roles. She addresses skepticism about her appointments, emphasizing qualifications over gender, and describes needing months after leaving the CISO role to disconnect from constant crisis monitoring.

Diversity Beyond Demographics

As CISO she prioritized cognitive and experiential diversity—bringing varied backgrounds to security decisions rather than focusing on surface representation alone. Different regional and professional perspectives, she argues, shape how teams assess and respond to risk.

Advising and AI Data Quality

Now advising Sakura and venture firms, Allison discusses obtaining cleaner, more reliable data from generative AI tools and agents. She notes enterprise ChatGPT deployments can help technical staff translate security concepts for business audiences when outbound data controls are managed responsibly.