The role of the chief information security officer (CISO) has never been more critical to the success and sustained well-being of an organization. The protection of information systems and data is integral to business operations. The National Association for Corporate Directors (NACD) provides very specific guidance stating that cybersecurity is an enterprise-wide risk management issue, not just an IT issue. The CISO should have a direct line of sight to the CEO and board of directors, and command of a budget that spans outside of IT realm.”]