as engineer - must revisit an old concept..cio ciso and related ..
useless titles..they are white man 's imagination to create : scare..
to sell : stuff : make it : controlled and expensive..
in any tech sec breach..
your cio/ciso are just corporate loudspeakers..
who wont even have creds/keys to assets or even ability to analyse the logs..
their superpower : shouting to the support guy..
and getting emotional about the 'promises' he ate at sales pitch..
ms -> makes backdoors -> shuts dem via antivirus -> u pay for it ..
in long term : even if windows was free and bundled with hardware..
it is the hole ecosystem and cost of it..long term..
no innovation..
and absolutely useless IT staff on board : just a phone book..
whose ego and page 3 face are really a burden to any self respecting aware product based company..
they are rubber seals in service companies..
which is just another modern contractor and wages distribution of daily wagery like jobs.
cio/ciso : dont have a clue about 'security'.
just literature and history of it.