Privacy Policy
Last reviewed: 27 August 2026
CISO Times is a publication for security professionals. Most of what we publish can be read without giving us anything at all, and this policy describes the narrow set of cases where that is not true.
Who is responsible
CISO Times is the controller of the personal data described here.
Contact: info@cisotimes.com
Reading the site
We do not require an account. There is nothing to register for, and reading an article creates no record tied to you.
Two things happen when a page loads:
- Performance measurement, using Cloudflare Web Analytics. It stores nothing on your device and does not identify you. It records the page, the referring page and timing measurements, in aggregate. We use it to find slow pages.
- Delivery, through Cloudflare, which hosts and serves this site. Serving a web page necessarily involves processing your IP address, and Cloudflare processes it to route the request and to protect the site from attack.
If — and only if — you have agreed to analytics cookies, Google Analytics also loads and sets the cookies listed in the Cookie Policy.
Your consent decision
Your answer to the analytics question is stored in your browser’s local storage
as ct-consent, together with the date you answered. It is never transmitted
to us. We keep no server-side record of who consented.
You can see and change it at the bottom of this page.
The newsletter
The newsletter is not yet operating. The sign-up form on this site is not connected to a mailing platform and no addresses are being collected through it.
When it launches, it will use double opt-in, the consent will be recorded for that purpose alone, and this policy will be updated to name the provider before a single address is collected. We will not repurpose an address given for one reason to do something else with it.
Email you send us
If you write to us, we hold your message and address for as long as it takes to deal with it and to keep a reasonable record of the correspondence. We do not add correspondents to any mailing list.
What we do not do
- We do not sell or rent personal data.
- We do not use advertising, profiling or cross-site tracking.
- We do not build reader profiles, and nothing you read here is used to infer anything about you or your organisation.
- We do not embed third-party social or video players that would set cookies before you have agreed to them.
Legal bases
| Processing | Basis |
|---|---|
| Serving the site and keeping it available | Legitimate interests — operating a website that is requested |
| Cookieless performance measurement | Legitimate interests — maintaining a usable site, with no device storage and no identification |
| Google Analytics cookies | Consent, which you can withdraw at any time |
| Storing your consent decision on your device | Strictly necessary to give effect to the choice you made |
| Answering your email | Legitimate interests — responding to a request you initiated |
Transfers outside the EEA
Cloudflare and Google are United States organisations that may process data outside the EEA, under the standard contractual clauses and their own transfer frameworks. Google Analytics only ever runs with your consent, so if you decline, no data reaches Google at all.
Retention
| Data | Held for |
|---|---|
| Consent record | On your device only, until you clear it or the policy version changes |
| Cloudflare Web Analytics | Aggregated; no identifiable record is retained by us |
| Google Analytics | Per the cookie lifetimes in the Cookie Policy |
| Correspondence | As long as needed to handle it and keep a record |
Your rights
Under the GDPR you may request access to your personal data, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting what was lawful beforehand.
Write to info@cisotimes.com. We will respond within one month.
Because we hold almost nothing tied to an individual reader, the honest answer to many access requests will be that we hold nothing about you. You may also complain to your national data protection authority.
Children
This is a professional publication and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
We will update this page when what we do changes — not on a schedule. The date at the top is the last review. Where a change affects analytics categories or their purposes, the consent version is raised and you will be asked again rather than being held to a policy you never saw.
Security
To report a vulnerability in this site, see our vulnerability disclosure policy.
Your current choice
Checking…