Who should agency CISOs report to?
From: Federal Times
Agency IT departments and CIO offices are in charge of developing and deploying IT solutions in an organization but don’t always take the lead on cybersecurity. Many agencies have a chief information security officer (CISO) to take the lead, however deciding where this position fits in the organizational structure can be hard to pin down.
Rafael Diaz, CIO at HUD, has spent time on both sides of the fence — as a CIO in the private and public sectors and a CISO with the state of Illinois — and has had a different perspective on who a security official should report to at different stages of his career.
| Print article |