Report by IANS Research & Artico Search
The Latest Security Organizational Design Trends
Key Findings
A functional department leader, such as a head of SecOps, at a Fortune 500-size company earns an average annual cash compensation of $307,000.
More than 40% of Fortune-500 size security organizations have a deputy CISO.
Fortune 500-size firms with revenues exceeding $7 billion generally have security teams of more than 50 professionals.
The average annual cash compensation for a functional department leader (such as a head of SecOps) at large security organizations is $247,000.
The average annual cash compensation for a functional department leader (such as a head of SecOps) at a Fortune 500-size company is about 25% higher than for the same role at large security organizations.
15% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to IAM.
11% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to GRC.
6% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to AppSec.
20% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to SecOps.
8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Incident response.
5% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Threat intel.
6% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Cloud security.
4% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Awareness training.
8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Leadership & strategic roles.
95% of Fortune 500-size CISOs engage regularly with the full board and/or board subcommittees.
68% of Fortune 500-size CISOs engage with board subcommittees at least quarterly.
31% of Fortune 500-sized security organizations have a dedicated, full-time deputy CISO.
34% of Fortune 500-size CISOs meet with the full board at least quarterly.
13% of Fortune 500-sized security organizations assign the deputy CISO role to a functional department head as part of a combined role.
The average annual cash compensation for a functional department leader (such as a head of SecOps) at a Fortune 500-size company is 40% higher than the average for the same role at midsize security organizations.
8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Other functions.
9% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Network security.