Question: To do so, they had responded to these risks by reorienting their security programs from relatively low-profile operations focused primarily on mainframe security to visible, integral components of their organizations' business operations.
Mainframe security is achieved by posting security guards around the mainframe.

Answer: it is not possible to tell

Question: Rather, they take responsibility for ensuring that their CIO models are consistent with the business, technical, and cultural contexts of their enterprises.
They are in charge of making sure the models are valid.

Answer: yes

Question: that's what i would do too
I would do that too.

Answer:
yes