by CISO Connect August 27, 2014 “Vendor should retain the ownership of the solution deployment with themselves”