In your opinion, where is the 'best' place to have the information security leadership placed in a larger company of say 10,000 staff? Would you have it be in a different place in a much smaller company, say one with 100 staff? If they are not the same, what reason do you have for the difference in placement