Chief security officer role has evolved quite a bit in recent years. At many large companies, the heads of both physical and information security now report in to the same person, an enterprise CSO. The pace of change for the function is accelerating along with the ever-changing nature of threats. Many believe CSOs will morph into chief risk officers (CROs) monitoring and mitigating enterprise risks, including those relating to information security and facilities, but excluding financial risks. The new responsibilities include understanding your company’s risk profile and risk appetite and then mitigating the risks accordingly.”]
Source: https://www.csoonline.com/article/2133759/will-csos-become-cros-in-the-future-.html