Discussion: Placement of the Information Security Role

Discuss the advantages and disadvantages of nesting the information security role within the information technology (IT) function of an organization. Note that in a small organization there may be no choice but to structure it this way. Doing it this way, a single person would be responsible for both roles.