Thinkers360

Who should the CISO report to?

Feb



CIO: Because CIOs and CISOs often have competing goals, prioritizes expedient IT service delivery over cybersecurity.

CFO: Incorrectly positions cybersecurity as a cost center with little strategic value.

CRO: Accurately frames cyber-risk as a subset of enterprise risk that has companywide implications.

COO: Correctly treats security as a baseline operational requirement that affects the entire enterprise.

CEO & BoD: Demonstrates a commitment to cybersecurity as tactically, operationally and strategically critical.



By Yaroth Chhay

Keywords: Cybersecurity, Leadership, Security

Share this article