Joe Carlon, emeritus faculty member for the Security Executive Council, discusses how he was able to drive a new risk management framework throughout ExxonMobil during his time as the company’s CSO and move the energy giant away from a security checklist mentality.