Chief Information Officer The role of a chief information officer in any company is to take leadership for developing and implementing any information that comes along in the company. In the process, the information technology proposal is created. This role of technology in most of the strategic businesses has made most of the executives who are aware of the technology and identify profitable applications of products and services in their company. Many of the companies have tackled this need through the rendezvous of the CIO. Any kind of operations in the company is carried out and supported by the CIO in order to improve the quality of services. The achievement and development of enterprise IT systems are all carried out by the CIO CIO is responsible for giving advice and assisting the senior managers on the purchases that the IT plans to make and management. CIO is concerned with the improvements of any work processes in the company. They promote successful and resourceful design and the operations of the company. The CIO is also responsible for making sure that all the training is carried out on time, developing policies and specific plans for any kind of appointments that might take place in the organization. He makes sure that all the managers meet the requirements that are required. The knowledge and skills of the personnel are assessed by the CIO. He ensures that all the personnel in the organization meet the performance goals that have been by the management. The CIO is responsible for making sure that the staff he retains in the organization and competent enough to create an office environment where they can work together as a team and on daily basis. The CIO also helps in monitoring and assessing new technology. Chief Information Security Office The person manning this office might either be a centralized employee or a contractor who is appointed in writing by a system owner to ensure the accomplishment of system-level security controls and to preserve system credentials. The employee should be familiar with complete IT security policies and detailed procedures in place to fully gear them for the system and test them in order to work effectively. The CISO is responsible for making sure that there is a supportive relationship with business partners or other consistent systems. He contributes to the self-assessment of system maintenance. He ensures that there is proper documentation and authorization of systems. He assists in investing in any kind of event that might occur in the organization. He also informs the IT security who is in charge of any alleged incident in the organization. CISO help in safeguarding and enlargement of system security plans and emergency plans for all systems under their accountability. They also contribute to risk evaluation to occasionally re-examine and understand the system, the risks involved, and alleviation strategies. They also help in determining and choosing the suitable level of security which is corresponding with the contact level. CISO has the responsibility of advising the system owner regarding security considerations in applications systems procurement or operation. He also has the duty of guiding him on the implementation, development and maintenance, and disposal activities. Introduct