As a CISO I would ensure that my company’s networks are protected by setting up firewalls and encrypting confidential and internal information. My employees would also be trained on the security principles as well as compliance. I’m sure that’s all within the same “ring” though. We’d use the top notch cloud software so that we have a place for our data to be regularly backed up into. I’d let it be known that only certain employees with certain permissions would be allowed to view certain types of information. As a CISO I’d be able to see and overlook any and everything that goes in and out the company, while maybe a lower level employee could only view information or data dealing with their account. Software and other programs would also be needed to keep prevent viruses from “infecting” the computers or anything else where important data is stored.