Describes the thought process and specific activities leaders should consider as they interview for an IT risk/information security leader role, what they should do within their first 90 days, and how to organize, evangelize and operate the program once they are into the job. Provides practical, tested strategies and guidance for long term success.