Is it time to relook at the CIO role requirements to include some level of CISO/ CSO experience?

Many of the security defences that companies invest in are blind to encrypted traffic and untrustworthy digital certificates, a study reveals.