Section 2(1)(b) in The Information Technology (Information Security Practices and Procedures for Protected System) Rules, 2018
(b)"Chief Information Security Officer" means the designated employee of Senior management, directly reporting to Managing Director /Chief Executive Officer/Secretary of the organisation, having knowledge of information security and related issues, responsible for cyber security efforts and initiatives including planning, developing, maintaining, reviewing and implementation of Information Security Policies;