State of the CSO

2015

Purpose and Methodology

SURVEY SAMPLE

SURVEY METHOD

TOTAL
RESPONDENTS

366 Security
Decision-Makers

COLLECTION

Online
Questionnaire

MARGIN OF ERROR

+/- 5.1%

AUDIENCE BASE

CSOonline.com
visitors, CSO
LinkedIn Forum
members and email
invitations to
audience.

NUMBER OF
QUESTIONS

26 (incl.
demographics)

SURVEY GOAL
Mitigating risk and keeping an
organization secure continues to be a
challenge. CSOs annual State of the CSO
survey is conducted to provide a
complete overview of the evolving role of
CSOs in todays business climate, from
security strategy, to metrics, budget and
function ownership.

Source: State of the CSO Survey, CSO, 2015

Big Breaches = Security Practices Reevaluation

Not Sure If They

Are Reevaluating

7%

Not Reevaluating

49%

Reevaluating

44%

Q. Have recent big name data breaches (such as those experienced by eBay, Neiman Marcus and Target)
caused your organization to reevaluate its information security standards?
Source: State of the CSO Survey, CSO, 2015

Most Likely to Directly Report to CEO

23%
21%

13%
8%

8%

8%

7%
4%

Q. To whom do you directly report?

Source: State of the CSO Survey, CSO, 2015

Increasing Value in Managing Risk

70%
51%
35%
19%

13%
5%
More Value

Less Value

No Change

Past 12 Months
Q. In the past 12 months, has your organization's senior management placed more, less or the same value on risk management?
Q. In the next 12 months, how do you expect the value senior management places on risk management to change?
Source: State of the CSO Survey, CSO, 2015

Collaboration Needed for Successful ERM

Implementation
Information Security

87%
82%

Business Continuity/Disaster Recovery

77%

Executive Management

72%

Financial Risk/Insurance

67%

Physical/Corporate Security

62%

General Counsel/Legal

56%

Human Resources

40%

Loss Prevention

37%

Third Party Technology Ecosystem

35%

Supply Chain

34%

Sales/Marketing
Other

5%

6.5
depart
ments
on
averag

Q. Which of the following disciplines, departments or groups are included in your organizations formal
Enterprise Risk Management process? (base: use a formal ERM process that incorporates multiple types of
risk)
Source: State of the CSO Survey, CSO, 2015

Satisfaction Decreasing with Security Vendors

Q. In general, how satisfied are you with the quality and relevance of products and services offered by
security vendors?
Source: State of the CSO Survey, CSO, 2015

Learn More

For more information on this study, contact Sue Yanovitch,

VP of Marketing, at syanovitch@idgenterprise.com.

Source: State of the CSO Survey, CSO, 2015