Attackers are increasingly turning to phishing as the way into companies' networks and many organizations are making it easy to do so.

"One of the key benefits of a FISO is that they are hired on a contractual basis, they are highly scalable, unlike the direct-hire CISO."