The CISO’s Guide To Security Operating Models

What CISOs Need To Know About Staffing And Designing A Security Function

May 9th, 2022
With contributors:
Joseph Blankenship , Melissa Bongarzone , Alexis Tatro , Peggy Dostie


CISOs frequently have questions about what security organizational structures are being used by other leading organizations. This report lays out trends in security organization design and different common organizational structures seen in mature security functions. It also covers a model for security service model design and common sourcing patterns seen by Forrester in our work with CISOs. CISOs should use this PowerPoint to guide them as they answer some of the most common questions we receive about organizing and staffing the security function.

Want to read the full report?

This report is not available for purchase at this time.

Forrester helps business and technology leaders use customer obsession to accelerate growth. That means empowering you to put the customer at the center of everything you do: your leadership strategy, and operations. Becoming a customer-obsessed organization requires change — it requires being bold. We give business and technology leaders the confidence to put bold into action, shaping and guiding how to navigate today's unprecedented change in order to succeed.