Matters escalated to the Chief Information Security Officer would typically include significant cyber or operational resilience concerns, material breaches of risk appetite, major regulatory matters, unresolved management actions, significant third-party security issues, material client commitments, or disagreements regarding risk acceptance, prioritization, or investment decisions. The U.S. BG CISO is accountable for cyber risk, resilience, and security outcomes for Sun Life's U.S. business, a core Health & Protection platform focused on group benefits, dental, disability, life and absence-management solutions, with operations primarily in the United States and connectivity to enterprise shared services and technology teams.