(Source: CSO Online) To begin, the CISO first needs to understand the current security state of the company. This effort will require a continuous review of assets such as hardware, software, network configurations, policies, security controls, prior audit results, etc. The goal is to gather information on what is the current technology and application …