Uber's former head of security, Joe Sullivan, was found guilty of obstructing an investigation by the Federal Trade Commission into Uber's security practices on Wednesday. He was also charged with hiding a 2016 data breach from authorities. This serious offense could have far-reaching implications for other Chief Information Security Officers (CISOs)- especially on the outsourced fractional/virtual CISO business model.