The series of high profile data breaches that punctuated 2013 brought intense scrutiny on data security and the accountability of IT. At most organizations, the ultimate responsibility for IT security falls in the lap of the CIO. But it shouldn't, argues Dr. Eric Cole, a SANS Institute faculty fellow and head of SAN's Cyber Defense Foundations program. FierceCIO spoke with Dr. Cole about the need at many organizations for a chief security officer, where that individual should come from and why the CIO should embrace, not shun, this new colleague.
(Read my complete article at FierceCIO)