CISOs Need Backing to Take Charge of Security

Unless the CEO and other C-suite executives defer to the CISO’s decisions on cybersecurity, is that CISO really running things?