Introduction
Information technology implementation is the basic requirement of emprises now days. Information security (IS) is important to secure this system and ensures the balance in information risk and information control. “Principles of Information Security, 4th Edition” is the book which provides balance information about information security in modern enterprises, risk management, security technology and Information security professionals with their roles in managing risk in information security (Whitman & Mattord, 2011). The study of this book makes us capable to evaluate the top five IS professionals and their respective roles in information security.
Top Five IS Professionals and Their Roles and Responsibilities
In top five IS professionals Chief Information Officer (CIO). CIO is the leading IS professional as he led other on the way to adopt the strategies to mitigate Information risks in order to manage the information system of the company. The main responsibility of CIO is to guide the chief executive officers and president of the company in information management matters and advise them in order to take effective decisions to implement information security system (Siponen, 2000). The leading position and decision making power of CIO make it capable to take important information management decisions. This is the major reason to rank him as the fist important IS professional.
Chief Information Security Officer (CISO) is the second most important IS professional. CISO is also called manager of IT security. CISO directly report to CIO. CISO mainly responsible to assess, manage and implement the system of information security in organization. Core management responsibility to operate and manage the operations of security is an important factor which is the basic reason to rank CISO in second position. CIO plans the strategies and CISO implement