When the SOC reports to the CTO and the CISO’s role is advisory only, accountability and authority quietly split apart; this white paper makes the case for elevating the CISO’s reporting line to the CEO or Board and giving the function its own budget.