The CEO is very concerned about privacy and cybersecurity at SodaCo. SodaCo has an extensive cybersecurity team, but does not have a written information security policy. The CEO has sent you an e-mail asking for you to explain (i) the role of the CISO within the company; and (ii) your recommendations regarding adopting or using a cybersecurity framework to better align and coordinate SodaCo’s security functions. The CEO is also very busy and you know that she doesn’t like e-mails longer so keep your response words or less.