Internal and Vendor Communication

A CISO functions as a link between various departments at a company, and all of its third parties (insofar as cybersecurity is concerned). They don’t just manage the information security team—they have their hand in many different teams. Therefore, they need to have good relationships and visibility at all times into each vendor or department they work with.

  • Define which type of communication channels are acceptable and which are not
  • Prepare communication equipment to be used in case of an emergency / disaster

A CISO will constantly check in with his or her team members, seeing both how they’re solving any information security issues and if there’s any level of risk that has recently come up that needs to be addressed. Increasingly, a CISO is also responsible for reporting cybersecurity to the board of directors.
Source :
https://www.bitsighttech.com/blog/ciso-roles-and-responsibilities
https://advisera.com/27001academy/knowledgebase/what-is-the-job-of-chief-information-security-officer-ciso-in-iso-27001/