The legislative mandates have potentially replaced CIO's primary concerns of technology risk management. The challenge for the modern organization will be to find CIOs who are prepared for the challenges. Gramm-Leach-Billey (GLB) authorizes eight federal agencies and the states to enforce three rules regarding financial privacy, the safeguarding and pretexting. Under GLB, due diligence now includes state-of-the-art expertize in hacking, malware and social engineering. According to the legislative mandates, with this swing it is possible that some provisions of this and future legislations will soften the treatment of executives.