It's interesting to note that her counterparts at the other two agencies have IT/CS backgrounds.

I'm thinking that if I'm the CSO/CTO of a top critical data company, I have some serious domain knowledge other than hanging out with the MBAs and a few management notches on the resume. The reason I feel this way, is that I've seen too many "business" types drive a technical company into the ground by going through the management motions without understanding the tech. Hundreds of companies over the decades. (Not that tech people can't mismanage tech companies as well...)

I don't want rent-a-cops guarding valuable hordes of personal data, I want serious cyber warrior types.