Chief Information Security Officer
A Chief Information Security Officer (CISO) is the senior executive responsible for an organisation’s information security and cybersecurity strategy
What it means, how it is used and where it comes up, with its related concepts.
What it is and how it works
The role aligns the protection of systems and data with business goals: assessing risk, setting internal policies, coordinating incident response, promoting training and awareness, and overseeing compliance with rules such as the GDPR or the EU NIS2 Directive.
It differs from the CIO or CTO, who focus on technology and its development, and from the Data Protection Officer (DPO), whose remit is compliance on personal data. In smaller organisations, this responsibility may sit with someone who holds several roles or with an external provider.
Also known as
CISO, head of information security
Topics