At a recent security convention, I had the opportunity to meet and learn from an experienced CISO. This CISO introduced me to a simple yet powerful method for managing an information security program using a bubble chart. I want to share the insights I gained from this valuable lesson and how it can help prioritize…