Chief Information Security Officer

The person a covered entity designates to run its cybersecurity program; the CISO reports in writing at least annually to the senior governing body.