As a result, what was once largely a CIO function is becoming that of a CISO, with them taking on more business risk responsibilities ... continuity, high availability, and incident response.