CISO reporting structure

The recurring enterprise question of where the security function sits — under the CIO, the CEO, legal or elsewhere — and what each line does to security's independence and executive access.