Paul Raines is the Chief Information Security Officer for the United Nations Development Programme. He says CISOs must be certified as following the best information security practices of ISO 27001. The UN Development Programme is a 2014 recipient of the CSO40 award, presented to 40 organizations for their security projects and initiatives that demonstrate outstanding business value and thought leadership. Raines: CISOs are busy swatting the ants of tactical security issues, but must never lose sight of the larger strategic security objectives for their organization.”]
Source: https://www.csoonline.com/article/2135616/ants-and-elephants-in-the-ciso-s-office.html