Re: CIO, CISO

[Clifford Collins <collinsc () FRANKLIN EDU>]

Chris,

It would be worth your time to download the occasional paper from ECAR titled, "The Career of the IT Security Officer 
in Higher Education" that is found at http://net.educause.edu/ir/library/pdf/ECP0901.pdf

Check out chapter 2 starting on page 11. Much of the work regarding the CISO has been done for you.

Clifford A. Collins
Information Security Officer
Franklin University
201 South Grant Avenue
Columbus, Ohio 43215
"Security is a process, not a product"

----- Original Message -----
From: "Chris Garriss" <chris_garriss () UNC EDU>
To: SECURITY () LISTSERV EDUCAUSE EDU
Sent: Friday, October 16, 2009 12:47:32 PM GMT -05:00 US/Canada Eastern
Subject: [SECURITY] CIO, CISO

Perhaps a bit off from the scope, but I would appreciate responses to
the following to resolve a discussion:
1)  to whom does your CIO report?
2)  to whom does your CISO report?

reply directly to me, and I will post the summarized totals.

Thanks,
Chris