Chief Information Security Officer Must Create Credibility In Role; Run Information Security like a Business. “You have to balance the people, process and technology,” says Katz. Katz sees every CISO as the CEO of their mini corporation called information security or technology risk. Katz: Security is a journey, not a destination. It’s a three-legged stool – and you must balance the three. “Your audience and your funders — your board of directors, should be a security committee that is made of seasoned business executives””]