David Estlick, chief information security officer of Chipotle Mexican Grill joined James Christiansen, vice president and CSO of cloud security transformation at Netskope, to speak about managing corporate expectation. (Photo by Steve Dykes/Getty Images) A potential data breach inside an organization typically brings demands from top executives for answers, often before security teams can provide any. Security professionals should proactively set expectations: most of the initial details will probably be bad, though also imperfect, and a lack of information can sometimes be a good sign. Such was the recommendation from a pair of panelists speaking Monday at the 2021 RSA Conference â David Estlick, chief information security officer of Chipotle Mexican Grill and James Christiansen, vice president and CSO of cloud security transformation at Netskope.