--- title: "It’s time to rethink CISO reporting lines" url: https://daily.dev/posts/it-s-time-to-rethink-ciso-reporting-lines-kkx715ror source_url: https://www.csoonline.com/article/4136293/its-time-to-rethink-ciso-reporting-lines.html type: article source: "CSO Online" published: 2026-02-24T07:06:12.120Z updated: 2026-02-24T07:06:47.475Z tags: ["security", "cyber"] reading_time: 6 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # It’s time to rethink CISO reporting lines **[CSO Online](https://daily.dev/sources/csoonline)** · 6 min read · 0 upvotes · 0 comments ## Summary 64% of CISOs still report to IT leadership (CIO or CTO), a structure that security experts argue creates inherent conflicts of interest. The CIO is incentivized for efficiency and delivery velocity, while the CISO must prioritize risk reduction — goals that frequently clash over budgets, patching schedules, and resource allocation. Multiple security leaders and analysts advocate for CISOs reporting directly to the CEO or general counsel to ensure unfiltered risk escalation. Some analysts point to an emerging 'Chief Digital Risk Officer' model that positions digital risk — spanning cyber, data, AI, and third-party exposure — as a board-level function alongside the CFO and CRO rather than beneath IT. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [The endless CISO reporting line debate — and what it says about cybersecurity leadership](https://daily.dev/posts/the-endless-ciso-reporting-line-debate-and-what-it-says-about-cybersecurity-leadership-dbkqptr28) · CSO Online · 0 upvotes · 0 comments - [The modern CISO is becoming the next CFO](https://daily.dev/posts/the-modern-ciso-is-becoming-the-next-cfo-kpz5pjiva) · CSO Online · 0 upvotes · 0 comments - [With CISOs stretched thin, re-envisioning enterprise risk may be the only fix](https://daily.dev/posts/with-cisos-stretched-thin-re-envisioning-enterprise-risk-may-be-the-only-fix-9bztpu0jx) · CSO Online · 0 upvotes · 0 comments - [The expanding CISO role: From security operator to enterprise risk strategist](https://daily.dev/posts/the-expanding-ciso-role-from-security-operator-to-enterprise-risk-strategist-r1fcpddqz) · CSO Online · 0 upvotes · 0 comments - [12 signs the CISO-CIO relationship is broken — and steps to fix it](https://daily.dev/posts/12-signs-the-ciso-cio-relationship-is-broken-and-steps-to-fix-it-4amxtjqwr) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/it-s-time-to-rethink-ciso-reporting-lines-kkx715ror)