Forrester

Why Read This Report

Only a few years ago, the vast majority of chief information security officers (CISOs) reported to the CIO. Their task was to run and manage the technical and operational security infrastructure. Reporting was easy: You reported on the operational status of the security infrastructure and provided a status update on the projects. But now that information security has become an integral part of the risk management function in various organizations, it has piqued the interest of the board of directors, and many boards are asking CISOs to present to them. Since this is new territory, many CISOs are looking for advice. This report provides tips for the CISOs currently reporting to the board and the numerous others who soon will be.