Cover Image

資訊安全長(CISO) 的「C」的狀態

The State of the "C" in CISO

出版商 IDC 商品編碼 324772
出版日期 內容資訊 英文 13 Pages
Back to Top
資訊安全長(CISO) 的「C」的狀態 The State of the "C" in CISO
出版日期: 2015年02月12日 內容資訊: 英文 13 Pages



「資訊安全長」 (chief information security officer: CISO) 在任何企業來說都是新的,其地位、職責依企業有很大的不同。CISO的地位、職責慢慢受尊重。CISO的「C」是否有意義,是不是真的受尊重,受到企業經營團隊的關聯性,及負責人在企業內的職位左右。如果違反行為發生了CISO將處於嚴重立場,不過,實際還沒產生那樣的事態,在各企業給予CISO負責人相應的責任、地位。

本報告以各種企業269名資訊長的問卷調查為基礎,提供各企業的資訊安全長(以下CISO) 的職責、職位,及經營團隊的關聯性等的相關分析。



  • 調查手法
  • 調查受訪者簡介


  • CISO的職位層級是哪個程度?
  • CISO被邀請至經營會議嗎?
  • 關於資訊安全管理,經營團隊如何策略性行動?
  • CISO以多少頻率,決定公佈違反行為?誰下決策?
  • CISO怎麼考慮違反行為暴露後的前途?




  • 相關調查
  • 摘要


Product Code: 254283

"Whether the 'C' in CISO is truly appropriate or just hand waving at a problem depends on the level of authority the CISO has in an organization and his/her interaction with executives," said Pete Lindstrom, research director, Security Products. "Because breaches often come full of 'stick' with very little 'carrot,' there can also be a backlash against security professionals. Luckily, this hasn't happened, and it appears that organizations are finally giving security and the attention they deserve."

Table of Contents

IDC Opinion

In This Study

  • Methodology

Situation Overview

  • What Is the CISO's Level of Authority?
  • Have CISO's Been Invited to the Table?
  • How Strategic Is the Executive Team in Information Security Management?
  • How Often Do CISOs Face a Breach Disclosure Decision? Who Makes It?
  • Should CISOs Lose Sleep at Night?

Future Outlook

Essential Guidance

Learn More

  • Related Research
  • Appendix: Respondent Profile
  • Synopsis

List of Tables

  • Table: CISO Reporting Levels by Industry (% of Respondents)
  • Table: Comparison of Frequency and Effect Scores (% of Respondents)
  • Table: Key Security Drivers
  • Table: Breach Notification Frequency by Industry (% of Respondents)
  • Table: Breach Disclosure Disagreement by Industry (% of Respondents)
  • Table: CISO Career Outcomes: Actual Versus Anticipated (% of Respondents)

List of Figures

  • Figure: Distribution of CISO Reporting Levels
  • Figure: Distribution of Reporting Frequency for Management Levels
  • Figure: Respondents by Industry
  • Figure: Respondents by Total Revenue
  • Figure: Respondents by Number of Employees
Back to Top