Developing and implementing security policies and procedures, perhaps using a security framework as guideManaging security staff, which means overseeing many security teams at larger organizationsUnderstanding network activity and preparing for potential threatsOverseeing incident response and disaster recovery planningCoordinating the response and recovery efforts when a data or security breach occursReporting to the designated hierarchy, which might be the CIO, the CEO and even the board of directors