If they fail to do so, they risk fallout. Regarding our original question, where should the buck stop? CISOs will always play a vital role in responding to events, but they are only one piece of ...