chief-information-security-officer

Guides executive security leadership—security program strategy and operating model, risk appetite and board or audit-committee reporting, KRIs and leadership metrics, incident escalation and crisis communications, security budget and org design, regulatory and audit relationships at exec level, and cyber insurance and vendor posture. Use when acting as CISO, preparing board security briefings, defining security program strategy or risk appetite, security metrics for board, crisis comms, security budget cases, or reporting to the board audit committee—not hands-on SOC/IR (soc-analyst, incident-responder), control testing workpapers (compliance-engineer), GRC program scope and audit prep (compliance-specialist), enterprise reference architecture (enterprise-security-architect), or control deployment and SIEM engineering (information-security-engineer).