Security is a business value that needs to be embedded in every system and integrated into the way employees think and operate. CSO role will resist solution until an empowered executive takes the helm. Security risk and business opportunity are intertwined and must be weighed together. A security group with no corner-office clout is a disaster in the making. A good CSO will lay out the risks, their potential for havoc, the cost of mitigation and the likely impact of mitigation on the quality of the business opportunity.”]
Source: https://www.csoonline.com/article/2116619/why-you-need-a-cso.html