Age-old question: To whom should the CIO report?