Should a CISO reports to the CIO or the CEO?

Team & Organizational Design

16.4k views2 Upvotes8 Comments

Director of Information Security Operations in Consumer Goods, 1,001 - 5,000 employees

BOD always preferred

CISO in Finance (non-banking), 51 - 200 employees

CEO, MD or BOD .. not to CIO

Director - IT in Software, 5,001 - 10,000 employees

CEO

Managing Director in Software, 201 - 500 employees

CEO not CIO

Head of IT Service Operations (APAC/EMEA) in Software, 10,001+ employees

CEO, however depond how an organization is structured.

Managing Director in Software, 201 - 500 employees

Shifting the CISO Reporting Structure. According to K logix, more than half of CISOs report to the chief information officer (CIO) while 15 percent report to the chief executive officer (CEO). The rest report to the chief operation officer (COO) or a risk management leade

Director of Operations, Self-employed

CISO should report to COO or the CEO.

Director in Finance (non-banking), 10,001+ employees

CEO not CIO... CISO and CIO often have conflicting priorities and metrics... the CIO measured on uptime will not want the CISO taking systems down to patch, etc.

Content you might like

Have the business model and the IT operating model become one and the same now?

Team & Organizational Design IT Strategy & Roadmap Operations Management

They are the same thing now37%

This isn’t the case for most companies53%

They are still separate models8%

442 PARTICIPANTS

2.3k views1 Comment

If you had a magic wand - what's the #1 daily business challenge you'd eliminate?

People & Leadership Strategy & Architecture Cloud +57 more

CTO in Software, 201 - 500 employees

Without a doubt - Technical Debt! It's a ball and chain that creates an ever increasing drag on any organization, stifles innovation, and prevents transformation.

143 19 Replies