TechCrunch: Bipartisan bill seeks to elevate the federal CIO position. So even the federal government is attempting to pass a bill that makes an antiquated practice the industry is moving away from the law, and make it seem like it’s an improvement. The CISO reporting to CIO is wrong. If you want to take my cybersecurity seriously, than take it seriously and CISO reports to same person CIO does.