What are the differences between a CRO and a CISO?
Development Operations VP, Information Technology in Services (non-Government), 10,001+ employees
CISOs are in charge of implementing detect, protect, and recovery procedures and implementations. CROs are in charge of identifying risks and implementing business continuity plans. The CISO may report to the CEO or CISO while CRO may report to CEO or CFO. CISOs will be more technical in skill set where CRO will be legal and business oriented.Chief Data Officer in Services (non-Government), 51 - 200 employees
Assuming CRO means Chief Risk Officer, the coverage differs. CROs look at enterprise risk which would cover everything from talent retention and failure to innovate while the CISO’s scope covers cyber (and data) security.CISO in Finance (non-banking), 10,001+ employees
CISO is responsible for managing information and cyber security risk for the organization where CRO is responsible for managing all type of risks including market risk, credit risk, strategic risk, compliance risk, legal risk, insolvency risk, financial risk, governance risk etc. He is responsible for running Enterprise Risk Management of the organization where as CISO need to align information security and cyber security risks with enterprise risk. CISO must have robust working relationship with CRO and ideally CISO must report to CRO. CISO chairs Information security steering committee meetings and CRO chairs Risk Management Committee of the organization. CRO must report to Board of Directors and must not have any other role in the organization. Content you might like
Strongly agree4%
Agree68%
Neutral24%
Disagree2%
Strongly disagree0%
167 PARTICIPANTS
Already moved away45%
Starting to move away31%
Considering a move away - over 1 to 3 months22%
852 PARTICIPANTS
Chief Information Security Officer in Software, 5,001 - 10,000 employees
As a CISO or head of security, your role should include managing capacity and communicating effectively with the executive team. When capacity constraints could prevent you from achieving your security goals, it is important ...read moreRead More Comments
Chief Information Officer in Healthcare and Biotech, 1,001 - 5,000 employees
Our quickest spend reduction came from end point standardization and the narrowing of standard equipment to a menu of options. A standard replacement scheduled was implemented allowing a reliable prediction of endpoint costs. ...read more