The ISO is responsible for overseeing the institution’s information and data security. This is a program management role that should function in partnership with both IT and business leadership.