The weekend that changed my life did not transform my leadership overnight. The change revealed itself gradually, through hundreds of small decisions over the months that followed. How it changed me is something I have reflected on elsewhere. What I want to examine here is quieter, and harder to admit: what that change cost me in the eyes of the people around me. Because the decisions that protect an organisation are rarely the decisions that make a leader popular.

I became someone who said "no" more often than "yes." No to unnecessary exceptions. No to bypassing established processes. No to avoidable risks. No to "just this once."

Every decision protected the organisation. Every decision disappointed someone.

At first, that was difficult to accept. Like most leaders, I wanted to help people solve problems and remove obstacles, not create them. But experience had taught me that many of the controls people found frustrating existed because another organisation had already paid the price for not having them.

One of the greatest misconceptions about leadership is the belief that good leaders are the ones everybody likes. Strong relationships matter. Empathy matters. Trust matters. But there are moments when leadership demands something else, and sometimes the most responsible decision is also the least popular one.

That is the contradiction leadership lives inside. When nothing goes wrong, the controls look unnecessary. When something does go wrong, everyone asks why stronger controls were not already in place. The value of a difficult decision often becomes visible only when something bad never happens, and no one applauds an event that did not occur.

I also came to understand that exceptions rarely remain exceptional. One becomes two. Two become ten. Consistency begins to disappear and governance quietly erodes, not because of one major decision, but because of hundreds of small compromises. Every exception teaches an organisation what it is prepared to tolerate. That lesson extends far beyond cybersecurity; it applies to safety, quality, finance, ethics and leadership itself.

And here is the part few people talk about. The hardest part of leadership is not saying "no." The hardest part is saying "no" to good people with good intentions. They are not trying to create risk. They are simply trying to solve today's problem. Refusing a bad actor is easy. Refusing a colleague you respect, who is only trying to do their job well, is what actually costs you something.

Leaders carry the responsibility of protecting tomorrow, even when tomorrow has no voice in today's meeting.

Looking back, I understand why some people felt I had become harder to work with. In a sense, they were right. But many of the decisions they questioned at the time were the very same decisions they would have expected to be in place after the next crisis.

I no longer believe leadership is about making people happy. I believe it is about making decisions you are prepared to defend when the consequences become real. That may not always make you the leader people want.

But it may make you the leader the organisation needs.