Over the past seven years, the CISO for a US regional commercial bank witnessed the rise of ever-more sophisticated, targeted cyber threats. He also felt the increased pressure from the boardroom to ensure data privacy. He saw—and helped bring about—a remarkable transformation within the bank’s own security environment, one that makes his 10-person information security and privacy team much more effective and the bank more secure.