Great thread about how companies treat the CISO role and why each board of directors needs the expertise and information to be responsible to ensure that a company has a meaningful information security program. twitter.com/joncallas/stat…