The chief information security officer (CISO) is responsible for overall risk reduction and develops high-level initiatives to respond to security risk trends....