Chief information security officer

Chief information security officer

A chief information security officer (CISO) is the senior-level executive within an organization responsible for establishing and maintaining the enterprise vision, strategy and program to ensure information assets are adequately protected. The CISO directs staff in identifying, developing, implementing and maintaining processes across the organization to reduce information and information technology (IT) risks, respond to incidents, establish appropriate standards and controls, and direct the establishment and implementation of policies and procedures. The CISO is also usually responsible for information-related compliance.

Typically, the CISO's influence reaches the whole organization. Responsibilities include:

Having a CISO or the equivalent function in the organization has become a standard in most business, government and non-profit sectors. Throughout the world, a growing number of organizations have a CISO. By 2009, approximately 85% of large organizations had a security executive, up from 56% in 2008, and 43% in 2006. About one-third of these security chiefs report to a Chief Information Officer (CIO), 35% to Chief Executive Officer (CEO), and 28% to the boards of directors.[citation needed]

In corporations, the trend is for CISOs to have a strong balance of business acumen and technology knowledge. CISOs are often in high demand and compensation is comparable to other C-level positions.

See also


External links

Wikimedia Foundation. 2010.

Игры ⚽ Нужно решить контрольную?

Look at other dictionaries:

  • Chief Information Security Officer — Ein Chief Information Security Officer (CISO) bzw. Leiter IT Sicherheit bezeichnet die Rolle des Verantwortlichen für Informationssicherheit in einer Organisation. Die Aufgaben variieren je nach Bedürfnis der Firma, die diese Rolle ausschreibt… …   Deutsch Wikipedia

  • Chief human resources officer — A Chief Human Resources Officer (CHRO) is a corporate officer who oversees all HR and industrial relations operations for an organization. Similar job titles include: Chief People Officer, Chief Personnel Officer, Executive Vice President of… …   Wikipedia

  • Chief business development officer — A chief business development officer (CBDO) is a function within a company established beside the other executive functions like CEO or COO. The title is used to define a high ranking position alongside the CEO. The CBDO is expected to have a… …   Wikipedia

  • Chief information officer — (CIO), or information technology (IT) director, is a job title commonly given to the most senior executive in an enterprise responsible for the information technology and computer systems that support enterprise goals. The title of Chief… …   Wikipedia

  • Information Security Governance — Information Security Governance, Information Security Governance or ISG, is a subset discipline of Corporate Governance focused on information Security systems and their performance and risk management. Applicable Frameworks *… …   Wikipedia

  • Information Security Management — Information security (ISec) describes activities that relate to the protection of information and information infrastructure assets against the risks of loss, misuse, disclosure or damage. Information security management (ISM) are controls that… …   Wikipedia

  • Chief security officer — Der Chief Security Officer (CSO) ist in der Regel der Konzernverantwortliche für den Bereich Sicherheit. Dazu gehören Bereiche wie IT und Informationssicherheit, organisatorische und physische Sicherheit wie auch elektronische und mechanische… …   Deutsch Wikipedia

  • Chief security officer — A chief security officer (CSO) is a corporation s top executive who is responsible for security. The CSO generally serves as the business leader responsible for the development, implementation and management of the organization’s corporate… …   Wikipedia

  • Chief Security Officer - CSO — The company executive responsible for the security of personnel, physical assets and information in both physical and digital form. The importance of this position has increased in the age of information technology as it has become easier to… …   Investment dictionary

  • Federal Information Security Management Act of 2002 — The Federal Information Security Management Act of 2002 ( FISMA , usc|44|3541, et seq. ) is a United States federal law enacted in 2002 as Title III of the E Government Act of 2002 (USPL|107|347, USStat|116|2899). The act was meant to bolster… …   Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”