A company's Chief Information Officer or CIO should always be in charge of anything IT-related, which includes its cybersecurity efforts.