Three things business leaders should know about how IT security is changing

Things are changing in information security, but probably not in the way you think. Do business leaders know what their Chief Information Security Officer (CISO) is thinking?