The CIO may be in charge of the data, but who is responsible for enabling security? Where is the dividing line between the responsibilities of the CIO and those of the chief security officer (CSO)? Should there even be a dividing line? We asked Bil Harmer, a strategist working in the chief information security officer at Zscaler, a cloud-based information security company. Separation of CIO/CSO responsibility is fundamental and should be implemented by default, Harmer said.”]
Source: https://securityintelligence.com/move-the-cso-to-a-different-place-on-the-security-org-chart/