# Chief Information Security Officer
> A CISO is the senior executive responsible for an organisation’s information security and cybersecurity strategy.
URL: https://www.zorraquino.com/en/dictionary/internet/chief-information-security-officer.html

# Chief Information Security Officer

A Chief Information Security Officer (CISO) is the senior executive responsible for an organisation’s information security and cybersecurity strategy

What it means, how it is used and where it comes up, with its related concepts.

[The whole glossary](https://www.zorraquino.com/en/dictionary)

## What it is and how it works

The role aligns the protection of systems and data with business goals: assessing risk, setting internal policies, coordinating incident response, promoting training and awareness, and overseeing compliance with rules such as the GDPR or the EU NIS2 Directive.

It differs from the CIO or CTO, who focus on technology and its development, and from the Data Protection Officer (DPO), whose remit is compliance on personal data. In smaller organisations, this responsibility may sit with someone who holds several roles or with an external provider.

Also known as

CISO, head of information security

Topics

[Technology and data](https://www.zorraquino.com/en/dictionary/category/tecnologia-y-datos)

## Related concepts

- [Cybersecurity](https://www.zorraquino.com/en/dictionary/internet/cyber-security.html)
- [General Data Protection Regulation](https://www.zorraquino.com/en/dictionary/digital-marketing/general-data-protection-regulation.html)
- [Data governance](https://www.zorraquino.com/en/dictionary/data-governance)