Skip to main content

What guidance, if any, has been issued to agencies regarding separation of duties where the Chief Information Security Officer (CISO) also holds operational ICT responsibilities?

Answered Question 5658 (2026)
Question published
Reply lodged
Bookmark

Asked by

Priyanca Radhakrishnan

List MP · Labour Party

Question

  • What guidance, if any, has been issued to agencies regarding separation of duties where the Chief Information Security Officer (CISO) also holds operational ICT responsibilities?

Answered by

Hon Judith Collins

Member for Papakura · National Party · Minister responsible for the GCSB

Answer

I refer the Member to my response to WPQ 5655 (2026). The NZISM states that where multiple roles are held by the CISO, potential conflicts of interest should be identified and carefully managed.