Re: reporting structure

[George Farah <george.farah () QUEENSU CA>]

There is an EDUCAUSE publication that show various reports, CIOs, Chancellors, Legal counsel, VP ops and Finance and 
Provost directly are among the options.

It all depends on your culture centralised vs. de-centralised environments and maturity of your IT and business 
organization.

Hope that helps.

George Farah, GIAC/GSEC Gold, CRISC, CISA
University Information Systems Security Manager 
Queen's University, 
Kingston, Ontario, Canada k7l 3n6
-----------------------------------------------------------
CONFIDENTIALITY CAUTION: 
This communication and any attachments is for the use of the individual or entity to which it is addressed and may 
contain information that is privileged, proprietary, confidential and exempt from disclosure. If you are not the 
intended recipient you are notified that any dissemination, distribution, or copying of the communication is strictly 
prohibited. If you received this communication in error, please notify the sender and destroy this email immediately.
 
AVERTISSEMENT RELATIF À LA CONFIDENTIALITÉ: 
Cet envoi (et toute pièce jointe) ne s'adresse qu'à la personne ou à l'entité à laquelle il est destiné. Il peut 
contenir des renseignements privilégiés, confidentiels et ne devant pas être divulgués. Si vous n'êtes pas le 
destinataire prévu,  nous vous avisons que toute dissémination, distribution ou copie de cet envoi est strictement 
interdite. Si vous receviez cet envoi par erreur, veuillez en aviser l'expéditeur et détruire ce courriel immédiatement.


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Russ 
Leathe
Sent: October-23-13 4:21 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] reporting structure

 Who does Information Security report to? Does the CSO or ISO report  to the CIO or somebody else?

Thanks and Happy Cyber Security Month!


Russ
Gordon College
russ () gordon edu