Earl Porter

The responsibilities of the chief security officer keep growing. Years ago, personnel in the position fulfilled a very technical role and didn't have to really interact with the suits. However, over the years the role has changed. Today the CSO is responsible for a variety of very technical programs, such as intrusion detection, as well as some very non-technical programs, such as business continuity planning (BCP).

During my discussions with other CISOs, the common thread among the truly successful is an ability to communicate with non-IT department heads. By seeking the views of your fellow department heads, the CISO can develop a complete information security strategy and establish security champions throughout the company. Security is the responsibility of all users in the enterprise, and by engaging the functional department heads, the CISO can begin to create a deeper awareness around security issues.