Kansas Chief Information Technology Officer Lee Allen explains how, in addition to implementing agency-level security, he gives his CISO the autonomy he needs to protect the enterprise at large.