To make this scenario, CSOs need info to document risk degrees and security performance. This provides us to our 3rd prevalent challenge:Info deficiencies generally impede both of those government acquire-in initiatives and security performance. 1 common challenge will be the reliance on outdated menace information or facts on risks that fluctuate