Answer:
Chief Information Officer (CIO) should be responsible for the overall management of information and data within the organization, and as such, is in the best position to understand the risks and vulnerabilities associated with this information.
The CIO can ensure that the information security function is able to effectively protect the organization's information and data, while also supporting the organization's business objectives.