I've stumbled upon this blog from Shrdlu (that just entered into my blogroll) and found a very good piece on why a CSO ends up working more (ok, as much as) than his/her employees.Also a very good post from him on incident response.