Margaret Utterback quoted in article "Establishing Strong Cybersecurity and Data Privacy Leadership: The Roles of the Chief Information Security Officer and Chief Privacy Officer (Part One of Two)"

Following is an excerpt: 

This job function, like the field of cybersecurity itself, is dynamic and companies need to remain flexible in order to keep up with the changes. “CISO is a position that has evolved and is still evolving,” Margaret Utterback, a partner at Quarles & Brady said. “Previously the position was responsible for architecture and spoke that kind of language and understood the risk. But now with the implications becoming more significant for the global enterprise, companies need to think about information security separately from IT and have a separate position.”