CISO Reporting · Principle 113 of 200
Reporting Line Doctrine™

"A CISO buried under IT is a compliance function. A CISO heard by the board is a risk executive."
CISO Reporting · Principle 113 of 200

"A CISO buried under IT is a compliance function. A CISO heard by the board is a risk executive."