CISOs need to build relationships with lawyers now, both inside their organization and with an external counsel for independent advice. Legal expertise is becoming a strategic necessity for security leaders.
I think as a CISO, if you don't have a good relationship with a lawyer, now is an excellent time to invest in one. And I think you need to have that relationship both with your internal legal resources, but I think there is some value in having a trusted outside perspective that is independent of the organization that you are working with.
