Great article Steve on the constantly-changing, ever-evolving role of the security leader. As you rightly point out, the responsibilities and reporting structure of security leaders is in transition. As I point out in my LinkedIn article at https://www.linkedin.com/pulse/whod-want-ciso-richard-staynings, IDC predicts that “by 2018, fully 75% of chief security officers (CSO) and chief information security officers (CISOs) will report directly to the CEO, rather than the CIO”. Boards and the Executive Leadership Team are increasingly requiring regular updates on cybersecurity risk posture and this has to be a good thing given the seriousness of the evolving threats that organizations face today.