This dataset contains the annual reports for 18 companies researched as part of Joseph Da Silva's doctoral research into the purpose of Chief Information Security Officers in commercial organisations.