Stephen and Rich answer our viewers' questions. This month...

"I'm the Head of the new Cyber Security department, and I'm reporting to Head of IT, who's not a problem but some members of his team are quite abrasive. The structure means I find it difficult to hold the IT team accountable, which I consider to be my job."

Questions: Is this operating model advisable? Is there a better model? Is it a good idea for Cyber Security to report to IT? If so, why?