In a large enterprise, a Chief Information Security Officer (CISO), Chief Information Officer (CIO) and Chief Security Officer (CSO) have overall responsibility for cyber security. In smaller organizations, it can often be the IT Director, Head of IT or IT Manager who is responsible. However, regardless of organization size, every single employee has a responsibility to follow recommended procedures and practices. This relies on effective cyber security policies and procedures and regular employee training and awareness sessions.