The first principle addresses the acceptance of this premise by senior executive management, and the second ensures that the CIO has the organizational legitimacy to execute his or her role.
According to the second principle, the CIO must be able to execute his or her role.