CISOs represent federal, state government and private sector. Mike Russo, CISO for the state of Florida, believes an MBA provides a good foundation for the younger folks in information security. Chris Buse: “I believe CISOs need a strong understanding of technology, internal controls and a clear understanding of the legislative process because that is where the money ultimately comes from. These requirements center on knowledge and not specific initials behind your name,” Buse says. A private sector CISO at Intel Corp. Malcolm Harkins says an MBA degree will add great value to a CISO’s ability to control IT risk.”]
Source: https://www.inforisktoday.com/blogs/should-ciso-have-mba-p-864