How many Information Security Officers (ISO) are in each department? Our question is primarily for State Government, but may apply to others. How is the information security organizationally structured within State and department levels? We now have a state ISO with only some Agencies setting up an ISO.