Structure Your Security Practice For Success

CISOs are constantly evaluating the structure and make-up of their organization to make sure it aligns with business and risk management needs. While org structure can affect how well the security program operates, these concerns are often distracting from more pressing issues and objectives. This report examines key organizational challenges for security leaders, explains a practical approach for establishing roles and responsibilities, and offers three common models of security structure to use as a starting point. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.