This dataset comprises the codebook developed when analysing 18 annual reports as part of Joseph Da Silva's doctoral research into the purpose of Chief Information Security Officers in commercial organisations.