Every organization handles security differently, based on their needs and internal structure—but in some midsized and large companies, both the chief information officer (CIO) and the chief information security officer (CISO) are involved.
Article Link: https://www.bitsighttech.com/blog/cio-vs-ciso