7 Tips for Communicating with the Board
The key? Rather than getting bogged down in the technical details, focus on how a security program is addressing business risk.
February 6, 2019
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltd06bc43e755e50c5/64f0d485cd5cef232f019355/01-board.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
CISOs and other security leaders are under growing pressure to improve how they communicate with boards of directors.
Cybersecurity has become a board-level issue in many organizations amid growing concerns over the regulatory, financial, and reputational implications of data breaches and security failures. In fact, Gartner expects that by 2020, 100% of large organizations will be asked to report to their boards at least once annually on cybersecurity risk — up from the 40% that are required to do so currently.
That means security leaders will need to overcome their traditional communication challenges and find new and better ways to convey technology risk.
Ensuring board awareness about key metrics of cybersecurity programs has become critically important, says Greg Reber, partner at Moss Adams, a Seattle-based accounting, consulting, and wealth management firm. Board members need to be able to track not just cybersecurity events and actions, but also new and emerging threats. They also require a continuous assessment of how a program is doing, along with a road map of cybersecurity-related projects and their goals, Reber says.
"Cybersecurity is a relatively new risk but aligns very directly within traditional BoD oversight duties," he notes.
Here are the key steps for effectively communicating with the board.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024