Glossary

Security leadership terms, defined

One page per term: the definition first, in plain words, then why it matters to the seat and where it shows up on the record. Every entry is sourced to the rule, standard or organization the term belongs to, and carries a last-reviewed date.

12 terms

B

Board cybersecurity oversightBoard cybersecurity oversight is directors' supervision of how management handles cyber risk, by the full board or a committee. What the SEC, NYDFS and NIST expect.Also: Board oversight of cybersecurity, Cybersecurity oversight committee
Business information security officer (BISO)A BISO is a security leader assigned to one business unit, carrying the CISO's program into it. How companies describe the role, and how it differs from a deputy.Also: BISO, Business information security officer

C

D

Deputy CISOA deputy CISO is the second-ranking security leader, acting on authority the CISO delegates. Why boards watch the role for succession, and how filings show it.Also: Deputy chief information security officer

F

I

Interim CISOAn interim CISO covers the security chief's duties between a departure and a permanent appointment. How filings disclose it, and why the seat still counts as open.Also: Acting CISO, Interim chief information security officer

R

Regulation S-K Item 106Item 106 requires US public companies to describe cyber risk management, board oversight and management's role in Item 1C of Form 10-K. What it asks, and omits.Also: Item 106, Form 10-K Item 1C, Item 1C

V

Virtual CISO (vCISO)A vCISO is an outside executive who performs the CISO function on contract or part time. What regulators allow, how filings describe it, and what stays in-house.Also: vCISO, Virtual chief information security officer, Fractional CISO

A term missing, or a definition that reads wrong? Tell the desk through corrections. The longer explainers live in the guides.