Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

Why Untangling the CISO from IT Can Improve Governance and Security Outcomes

By Jake Frazier
April 01, 2021

Roles and responsibilities aren't always clearly defined at the executive level. There's often overlap across certain key initiatives and teams, which can lead to blurred lines or confusion among stakeholders. This is particularly common across CIO and CISO roles.

Traditionally at most organizations, the CISO position was created and nested under the IT department's umbrella, with the CISO reporting to the CIO. This started to shift in recent years, as the responsibilities of the CISO expanded in parallel with the increasing complexity of security risks and the cyber threat landscape. Information security professionals are now squarely accountable for protecting their organizations from costly data breaches — estimated to cost an average of $8.19 million per incident — and managing security staffing and resources that represent a $173 billion market.

Still, despite the fact that the CISO's duties are growing in scope and importance, and data protection has become a board-level concern, many security leaders still do not have a direct line to the CEO. One study from CIO and CSO magazines found that 60% of CISOs do not report to the CEO directly, and a Ponemon report found that 40% of CISOs do not have a direct seat at the leadership table, even in the event of a security incident.

This premium content is locked for Entertainment Law & Finance subscribers only

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473

Read These Next
How Secure Is the AI System Your Law Firm Is Using? Image

In a profession where confidentiality is paramount, failing to address AI security concerns could have disastrous consequences. It is vital that law firms and those in related industries ask the right questions about AI security to protect their clients and their reputation.

COVID-19 and Lease Negotiations: Early Termination Provisions Image

During the COVID-19 pandemic, some tenants were able to negotiate termination agreements with their landlords. But even though a landlord may agree to terminate a lease to regain control of a defaulting tenant's space without costly and lengthy litigation, typically a defaulting tenant that otherwise has no contractual right to terminate its lease will be in a much weaker bargaining position with respect to the conditions for termination.

Pleading Importation: ITC Decisions Highlight Need for Adequate Evidentiary Support Image

The International Trade Commission is empowered to block the importation into the United States of products that infringe U.S. intellectual property rights, In the past, the ITC generally instituted investigations without questioning the importation allegations in the complaint, however in several recent cases, the ITC declined to institute an investigation as to certain proposed respondents due to inadequate pleading of importation.

The Power of Your Inner Circle: Turning Friends and Social Contacts Into Business Allies Image

Practical strategies to explore doing business with friends and social contacts in a way that respects relationships and maximizes opportunities.

Authentic Communications Today Increase Success for Value-Driven Clients Image

As the relationship between in-house and outside counsel continues to evolve, lawyers must continue to foster a client-first mindset, offer business-focused solutions, and embrace technology that helps deliver work faster and more efficiently.