[surge]

Yeah, and my team and larger cyber org was under risk management, until some new exec decided to shift us under the technology org (a decision I do not agree with due to conflict of interest).

[kstrauser]

At my last shop, we were under Risk, IT, Security, and Compliance, aka RISC.