Establishing a Framework Key to Security's Communication with Board

There is no denying the chief information security officer's (CISO's) place in the boardroom. Financial firms understand the importance of the issue of cybersecurity, and most have allowed those who oversee the security of their firm to have a chance to speak with their top executives to raise their concerns.

The problem, however, remains in how that communication should occur. Where does the CISO sit in the organization? Who does he or she report to? These remain hot topics in the industry.

One