The roles of chief information security officers are changing as organizations establish a broader security strategy into their lines of business.