The chief information security officer’s organization monitors and reports any incidents and breaches to the senior leadership, the enterprise risk management team, client representatives, relevant business unit heads, and human resources teams for corrective action.