Who should the CISO report to in the organization? How can CISOs who are at competing organizations share information security without tension? And what is the relationship between risk, compliance and information security? 

In part two of our interview with Steve Katz, recognized as the first CISO, Vic Wheatman discusses these and other issues.