The responsibilities of departmental and agency chief information security officers will expand under legislation pending before Congress, but the position itself - though formalized - won't budge ...