# 🏛️ Role Profile: Executive Management (CIO / CRO / CISO / Cybersecurity Head Division / Heads of Division)

![Executive Avatar](../assets/Executive%20-%20Mgr%20Leadership.png)

## 📋 Role Overview
**Executive Management (CIO / CRO / CISO / Cybersecurity Head Division / Heads of Division)** provides business and risk oversight, approves strategic decisions, makes regulatory decisions when required, and participates in high-severity incident governance and decision-making.

---

## 🎯 Mandatory Responsibilities (SOP / Authority Matrix)
- 🏢 **Business & Risk Oversight**: Provide overall business governance, enterprise risk management, and operational oversight.
- 🎯 **Approve Strategic Decisions**: Approve strategic decisions (e.g. business shutdown, ransomware non-payment stance, public PR statements).
- ⚖️ **Regulatory Decisions**: Make mandatory regulatory decisions (e.g. formal data protection authority notifications, law enforcement engagement).
- 🏛️ **Incident Governance**: Participate in high-severity incident governance, crisis decision-making, and executive steering committee briefings.

---

## 🎮 TTX Scenario Responsibilities (Loan Ransomware Incident)
- Convene Executive Committee meeting upon receiving SEV-1 Interim Report.
- Authorize regulatory breach notifications for exfiltrated customer loan documents.
- Enforce strict corporate policy against ransom negotiations and approve long-term remediation budget.

---

## 📝 Action Checklist
- [ ] Receive executive briefing from Incident Commander and IR Communicator.
- [ ] Review risk exposure and potential regulatory impact.
- [ ] Approve strategic crisis decisions and public communication strategies.
- [ ] Make statutory regulatory disclosure decisions.
- [ ] Ensure post-incident corrective actions are adequately resourced.