What are the advantages of being both CIO and CISO of an organization?
Sort by:
I think the risk of being both CIO and CISO out weighs the benefits for that organization.
Completely agree Clifton, to some extend these roles act as a check and balance for each other. Too much security stifles growth, not enough security increases risk. Having one individual hold both roles seems like a recipe for disaster.
You know, when we analyze the United States government, there is a gem to be gleaned there that democratic nations apply. The CxO suite requires the same governing rules, there must be a separation of duties on power with the right level of oversight, checks, and balances more specifically ethics and trust... to assure the shareholders as well as the public security interests are protected.
Being able to defend budgets/projects at the executive level - helps to provide a clear overview of requirements, trends, and other functionality. Maintaining compliance on important efforts and driving strategy to help reduce audit risks and meet regulatory standards.
The missions of a CIO and CISO are closely linked and can better serve an enterprise when combined. Although finding such individuals may be a challenge.
Having the technical background of a CISO, and being able to effectively communicate complex issues to the business like a CIO, may also provide a competitive advantage.
I believe these roles need dedicated resources to be followed properly.
The SME can't be everywhere...