A common criticism of the CISO role is that CISOs are held responsible for security outcomes without having the authority to control the decisions that produce them. That mismatch creates risk for both the organization and the CISO. But simply giving the CISO more authority does not solve the underlying problem.The deeper problem is not…
