You frequently see the CISO/Privacy Officer roles combined. I did combine it myself for a while.

Even though the two topics overlap, they are also very different. Because the interests (data subjects vs. organization) are apart and also the scope differs from each other. The AVG only deals with information in relation to personal data, while security looks at ALL information.

Where are the overlaps and where are the differences? Listen to this podcast episode from CISO Fleur van Leusden!