Sometimes being the CISO can be a no-win position. According to a recent survey by the human resources and management consulting firm Heidrick & Struggles, some 36% of CISOs report to the CIO, with 18% reporting to the CTO — that is, more than half of all CISOs report to a technical corporate officer rather than the business side of the organization.
Source: Dark Reading: Cloud