What a CISO does. The CISO must move in the cyber environment. Cyber is not a domain in the sense that we have always understood this word, but in the sense that there is no way to physically see or touch the different elements that compose it.