Continuing a trend identified in last year's study, responsibility for securing information assets is shifting from the Chief Information Officer (CIO) into other areas of senior management and business, including chief executive officer, chief financial officer, chief risk officer and chief information security officer, as well as legal and compliance departments.For organizations to proactively