ANSI/ASIS CSO.1-2013, Chief Security Officer - An Organizational Model provides a structured framework for organizations developing a senior security executive function and an integrated security and risk strategy. The standard addresses reporting relationships, core responsibilities, strategic planning, risk assessment, organizational preparedness, asset protection, incident prevention and response, recovery, stakeholder relations, competencies, experience, education, compensation, and a model position description.
This PDF is intended for security executives, risk management leaders, human resources professionals, executive teams, governance committees, and organizations designing or evaluating an enterprise security program. It includes defined terms, references, and guidance for aligning the Chief Security Officer role with organizational objectives, regulatory considerations, and protection of people, information, physical assets, finances, and reputation.
Application Scope: Use this standard to support organizational design, executive role definition, enterprise security governance, security and risk strategy development, leadership assessment, and position description development.
