Should the business information security officer (BISO) report to the CIO or CISO?

Team & Organizational Design Business Relationships

CIO17%

CISO59%

Both the CIO and CISO19%

Neither (share your alternative in the comments)3%

Unsure1%

193 PARTICIPANTS

1.7k views1 Upvote1 Comment

Sort by:

CISO in Software2 years ago

I would love to hear why BISOs should report to the CIO.

Content you might like

Is anyone going to ICCWS (International Conference on Cyber Warfare and Security)?

Yes53%

No47%

When do you think we'll see more standards introduced for code signing?

Within the next 6 months29%

Within the next 7-12 months54%

Within the next 1-2 years15%

I have no idea1%

View Results

What are the fundamental leadership capabilities that are needed for an era of exponential technology and AI innovation?

Read More Comments

I’ve been digging into ways to strengthen Zero Trust on IBM i systems, especially as more orgs shift toward hybrid cloud. I’m curious, how are others approaching threat detection around shadow AI use and supplier exposure in these environments?

I wanted a point of view on migration from on-prem AD and SCCM to AAD and Intune. Would be great to have a perspective on, - Is there a real need since SCCM is still undersupport from Microsoft? - I understand that we can get rid of onprim AD Infrastructure and move on SaaS, but any other benefits we get by doing this?