The CSO position is the single point of contact for the diverse security requirements of today. The broad scope of the position entails a correspondingly broad background for today's CSOs. They must understand the requirements of both physical security and computer security, including the tools, practices and procedures in each area. They must have experience developing policies in both areas, working closely with business managers to align security goals with business requirements. Preferably, too, CSOs should have experience in integrating the two types of security, having worked on projects that required attention to the trade-offs and synergies between them.
Technical competence is critical, but so are interpersonal skills and life experiences.
CSOs must be excellent communicators, capable of understanding enterprise requirements and making the business case for security project funding. They must be leaders with the management skills and flexibility to run an effective organization at acceptable cost, while reducing the gaps between policy and actual practice. The overall mission of the CSO is to ensure intuitive and easy access to the right information by the right people at the right time. Develop policies and standards for implementing the above. Specify, test and implement technologies, tools and practices.