CISOs frequently have questions about what security organizational structures are being used by other leading organizations. This report lays out trends in security organization design and different common organizational structures seen in mature security functions. It also covers a model for security service model design and common sourcing patterns seen by Forrester in our work with CISOs. CISOs should use this PowerPoint to guide them as they answer some of the most common questions we receive about organizing and staffing the security function.