Many organizations consider themselves prepared for a data breach when and if their Chief Information Security Officer (CISO) feels they’re ready to handle a cyberattack. These organizations are wrong.
Sure, a CISO doesn’t make decisions in a vacuum, other C-level types like the Chief Technology and Chief Information officers are instrumental. But preparing your company for a breach - both by preventing data loss and being ready to respond to an actual event - requires the efforts of the entire executive team.