The CISO’s scope of work can also extend to law enforcement insofar as it relates to security matters and incident investigations. CISOs are C-suite officers who oversee the security policies and procedures of the company, which are meant to protect the business from internal and external threats.