The Information Technology & Security Compensation Survey provides comprehensive coverage of these functions at large organizations ($3 Billion and above) . You must participate in this survey in 2012 to purchase the final results.