Yahoo’s chief information security officer says security officers often have discussions with top executives. Yahoo’s Justin Somaini conducted a recent survey of 100 IT security managers. He says CISOs often have active discussions with CEOs about appropriate levels of security for organizations. That’s a much better sign than security within an organization just taking a stab at the dark, he says. Security is “as strong as its weakest link,” he says, referring to behaviors of individuals within the company as opposed to technical controls.”]
Source: https://www.govinfosecurity.com/culture-security-cisos-role-a-3985