Those of us who follow the security industry understand that enterprise security has evolved over the past few years from a minor border skirmish to an all out war. In this conflict escalation, no one is more visible than the chief information security officer who acts as the general in charge of all equipment and troops. The question remains however: Do CISOs really add value or are they simply overpaid firewall administrators with no political clout or budget dollars?