Survey says CISOs should get the blame, but no power
While most said chief information security officers (CISOs) offer "valuable guidance," only 38 percent of CEOs and other C-suite leaders believe they should be in charge of security strategy and purchasing decisions, according to a ThreatTrack Security report.
Many executives would not place control in the CISOs hands, but 47 percent believe the person in that role should be held accountable for data breaches. Just 25 percent of respondents believe CISOs contribute greatly to improving information security practices.
When asked how they would grade their CISOs, survey respondents said the following:
- A: 10 percent
- B: 45 percent
- C: 34 percent
- D: 11 percent