Skip to main content

Explore: Stakeholder roles and responsibilities

Risk manager
The risk manager helps to identify risks and manage the response to cybersecurity threats. They may also develop, implement, and enforce IT policies that employees must follow.

Chief Executive Officer (CEO)
The Chief Executive Officer (CEO) is the highest ranking person in an organization. They are responsible for financial and managerial decisions and reporting to shareholders. Because of this, they are concerned with the financial and operational impacts of incidents.

Operations manager
The operations manager often works with security analysts as the first line of defense in protecting the company from security incidents. They are often responsible for daily maintenance of security operations and are essential when it comes to security response.

Chief Financial Officer (CFO)
The Chief Financial Officer (CFO) is concerned about security from a financial standpoint, including the potential costs of an incident. They are also interested in the costs of the tools and strategies necessary to combat security incidents.

Chief Information Security Officer (CISO)
The Chief Information Security Officer (CISO) is a high-level executive responsible for developing an organization’s security architecture and conducting risk analysis and system audits. CISOs are also tasked with creating security and business continuity plans.