Aravind Swaminathan on Partnering with CISOs and Cybersecurity Crisis Management
1.5 hour listen | May.22.2025
Orrick’s Aravind Swaminathan recently spoke with seasoned cybersecurity professional David Malicoat, host of the podcast The Professional CISO Show. Here are some highlights from their conversation.
CISO as Strategic Partner
Aravind emphasized the evolving role of CISOs as strategic partners. He advised working closely with general counsels to navigate organizational dynamics. GCs can also help CISOs focus on enabling business goals rather than being the department of no. “If you want a C in front of your name and a seat at the table, you have to take that responsibility.”
Storytelling in Crises
For Aravind, helping clients navigate risks successfully—legal, reputational and political—hinges on effective storytelling. Aligning narratives with company values builds trust with stakeholders and prepares them to navigate crises. However, as Aravind noted, the storytelling work must come before the incident: "You can't tell the story in the breach."
Online Safety
What should CISOs understand about the emerging space of online safety? Aravind described it as a natural extension of cybersecurity efforts, addressing urgent digital protection needs. For Orrick’s clients, Aravind explained, online safety is another part of the threat landscape. “We see companies constantly thinking about, ‘how do I make sure that my members, my stakeholders, my customers are safe when they use our platform’,” Aravind said, noting that safety encompasses a range of considerations, from preventing phishing attacks to ensuring responsible content moderation and marketing.