"But we have an IT person - don't they take care of security too?" This is one of the most frequent questions we hear from company managers. The question is understandable, because both roles deal with data and computers, but behind it lies a misunderstanding that can be costly - especially now that the Cyber Security Law (CSL) sets new requirements for organisations. The answer is simple: an IT administrator and a CISO do different jobs — one looks after the company's IT est