CISO Support: Advisor vs Coach

Originally published December 12, 2024; last revised July 13, 2026

CISOs often seek outside support around a visible problem: a board meeting, a stalled budget, a difficult peer, an incident, or a role transition. An advisor can help with the problem. A coach works on how the executive is operating within it.

That distinction matters because advice and development produce different outcomes. Advice can improve a decision. Coaching is intended to improve the person making it.

Where Advice Stops

An advisor brings experience, pattern recognition, and a point of view. They may help a CISO assess options, avoid a familiar mistake, or choose a course of action. In the right situation, that is useful.

The limitation of advice is not the quality of the advice. The CISO may leave with a better answer without becoming more capable of handling the next problem, unless it's the same exact problem, which it almost never is. The board topic changes, but the conversation loses traction in the same way. The peer is different with a different agenda and perspective, but the conflict follows a familiar pattern.

At that point, the work is no longer about better advice. It is about understanding and changing the pattern that keeps producing the result.

What Coaching Reaches

Coaching works on the part of the problem the executive brings into every room: assumptions, habits under pressure, how resistance is interpreted, how authority is used, and how others experience them. Those factors travel from one board topic, peer relationship, or crisis to the next, even when the facts change.

The work is to make those patterns visible early enough to choose differently. That may mean noticing when a CISO narrows into technical detail, mistakes disagreement for ignorance, over-accommodates, or keeps pressing after the room has stopped following. The point is not self-awareness for its own sake. It is to expand the range of responses available when the familiar one is not working.

Over time, the CISO becomes less dependent on having seen the exact problem before. They become better at reading the situation, testing assumptions, and adapting without losing clarity or authority.

Choosing the Right Support

If you are trying to make a decision, prepare for a board meeting, or get perspective from someone who has handled a similar situation, an advisor may be enough. The value is in experience you can apply to the problem in front of you.

Choose coaching when you want to expand how you operate, not borrow someone else’s answer. The work is less prescriptive because the goal is to strengthen your judgment, range, and ability to adapt when the context changes.

Most CISOs need both at different times. Be clear which one you are buying. An advisor helps you move through a problem. A coach should leave you less dependent on outside guidance the next time the problem is different.