SOME THOUGHTS ABOUT ORGANIZATION STRUCTURE
Note: what follows was a document I prepared for my Syracuse University class, I would be interested in any feedback on its contents either in the comments section or sending me an email at dmintz@ourownlittlecorner.com. Thaanks.
One of the first discussion topics for our class dealt with an excerpt from one of our textbooks relating to where the security function should report within an organization.
The excerpt said “In these cases, the information security manager generally reports directly or indirectly to the CIO but in some cases may report to the CFO or, unfortunately, even to Operations.”