In large organizations the information security department is often headed by the CISO who reports directly to the ____.
A) VP of Insurance and Risk Management
B) VP of Marketing
C) top computing executive or Chief Information Officer
D) Chief Operations Officer

Question

Quizplus · Accepted Answer

It is common for the CISO to report directly to the top computing executive or Chief Information Officer, as they are responsible for overseeing the technology and information systems within the organization. The VP of Insurance and Risk Management may be involved in the decision-making process for information security, but they are not typically the direct supervisor of the CISO. The VP of Marketing and Chief Operations Officer are even less likely to be involved in information security responsibilities.

In Large Organizations the Information Security Department Is Often Headed