This article discusses the organizational structure of Coles and the internal structure of its IT department. It also explores the role of CIO and IS department in protecting information assets and technologies from threats. The article presents key arguments and references related to the reporting structure of CIOs in public and private sector organizations.