One likely explanation as to why a great many companies still don’t include their security leaders within their highest echelons is that these employees do not report directly to the company’s CEO, board of directors, or Chief Risk Officer. Yet, considering how much marketing (think consumer/customer data) and human resources (think employee personal/financial data) are impacted by your average data breach, it’s somewhat remarkable that more companies don’t list their chief security personnel among their top ranks. Nor is the average pay hugely different among all these roles. Not that these roles are somehow more or less important than that of a CISO/CSO within the organization.
For example, 88 percent listed a Director of Human Resources (or “Chief People Officer”), and 37 out of 100 included a Chief Marketing Officer. One-third of last year’s Fortune 100 companies included a Chief Technology Officer (CTO) in their executive stables 40 listed Chief Information Officer (CIO) roles, but just 21 included a Chief Risk Officer (CRO).Īs I noted in 2018, this is not to say that 96 percent of the Fortune 100 companies don’t have a CISO or CSO in their employ: A review of LinkedIn suggests that most of them in fact do have people in those roles, and experts say some of the largest multinational companies will have multiple people in these positions.īut it is interesting to note which executive positions the top companies deem worth publishing in their executive leadership pages. This is actually down from five of the Fortune 100 in 2018, the last time KrebsOnSecurity performed this analysis.Ī review of the executives pages published by the 2022 list of Fortune 100 companies found only four - BestBuy, Cigna, Coca-Cola, and Walmart - that listed a Chief Security Officer (CSO) or Chief Information Security Officer (CISO) in their highest corporate ranks. The next time you receive a breach notification letter that invariably says a company you trusted places a top priority on customer security and privacy, consider this: Only four of the Fortune 100 companies currently list a security professional in the executive leadership pages of their websites. But one aspect of that vaunted list that hasn’t shifted much since is that very few of these companies list any security professionals within their top executive ranks.
Many things have changed since 2018, such as the names of the companies in the Fortune 100 list.
0 kommentar(er)
