'Are we secure?' is the wrong question. It always was. It is now actively dangerous.

The CISO reporting line is one of those decisions that sounds organisational and behaves strategic. ...