Who does the CISO report to at your organization?

Team & Organizational DesignSecurity Strategy & Roadmap

CEO34%

CIO49%

CTO12%

Someone else (comment below)3%

544 PARTICIPANTS
4.8k viewscircle icon1 Upvotecircle icon6 Comments
Sort by:
IT Manager in Construction2 years ago

The CISO doesn't report to the CIO it is absolutely wrong.
Cybersecurity is under the IT and DS.

1 Reply
no title2 years ago

Cybersecurity is not under the IT and DS.

Senior VP & CISO2 years ago

CLO

Director of IT in Education3 years ago

I strongly believe the CISO should report to the CEO and administratively to the CIO/CTO

Senior Director, Defense Programs in Software4 years ago

Reports to the Chief Growth Officer.

vp information technology in Consumer Goods4 years ago

I am CIO/CISO - reporting to CEO

Content you might like

How are you building enterprise AI capabilities? What factors are driving your build-versus-buy-versus-partner decisions?

Read More Comments

What IT challenges keep you up at night?

Cybersecurity Concerns: Protecting sensitive data and systems from evolving threats.25%

Digital Transformation: Ensuring a smooth transition to a digital-first strategy.41%

Talent Shortage: Finding and retaining top IT talent in a competitive market.27%

Compliance and Regulations: Navigating complex compliance requirements.6%

System Downtime: Minimizing the risk of unplanned outages and disruptions.1%

Something Else - Please elaborate if possible

View Results

What team compositions and skill sets do you think are essential for AI-enabled IT organizations? What roles or functions are critical to have as you build AI capabilities?

Read More Comments

What actions is your organization taking to mitigate the risks and manage the impact of the CrowdStrike outage? (Select all that apply)

Recovery procedures: Activating recovery procedures and guiding help desk on increased calls46%

Employee Support: Assisting affected employees with alternative work methods and internal updates (intranet posts, email blasts)59%

Incident response: Activating in-depth security investigation and response procedures51%

External support: Seeking support from external consultants, tech vendors, and service providers22%

Security measures: Implementing additional security controls and notifications to protect our users32%

External communication: Providing updates to customers and external stakeholders28%

CrowdStrike communication: Communicating directly with CrowdStrike26%

Microsoft communication: Communicating directly with Microsoft19%

Other: Share in comments3%

View Results

Is your organization pursuing large-scale AI enablement, such as enterprise-wide access to tools like Microsoft Copilot, or are you focusing on high-value use cases within specific functions? Why have you chosen that approach?

Read More Comments