Roles and responsibilities of chief information security officer