Published: 17 August 2012
Summary
A CISO is required for any mature business to build and maintain an information security program, support defensibility in regulatory actions, and balance the need to protect the business against the need to operate the business.
Included in Full Research
- The Blissfully Ignorant: No Security Program, No Security Officer, No Problems
- A Security Officer in Name Only: The General Counsel as a Security Officer
- We Don't Need a Security Officer: A Good Program of Security Controls With No Central Leadership
- The Business Case for a Chief Information Security Role