The accelerating proliferation of cyber attacks has expanded the demand for Chief Information Security Officers, along with the expectation for executives who hold that title.  With the conventional belief that successful cyber attacks are all but inevitable, CISO's often find themselves in a "damned if you do and damned if you don't position".  Somewhat akin to a head of law enforcement who's constituency expects "zero crime" and measure any criminal activity as failure.  The expectation is unrealistic and leads in part, to the high level of turnover in CISO ranks (together with a rapidly expanding demand for CISOs against a limited supply of suitably trained security leaders).  That said, the role is critical and growing in importance as cyber attacks become a ever present reality in the global digital economy.  Setting and managing expectations for the CISO role is essential and the first 90 days in the role is where that process starts...