The CISO's Handbook — Presenting To The Board

Your ability to communicate can mean the difference between success and failure in many aspects of your professional life, and it becomes even more important when trying to get the attention of an executive board. Now that information security has become an essential part of risk management across many organizations, chief information security officers (CISOs) must effectively present their case to boards and c-level executives in order to articulate risk posture, explain strategy, or garner more budget. By understanding the audience, simplifying security issues into nontechnical terms, and mapping out a clear storyline, CISOs can productively position themselves to be key influencers in the boardroom. This report outlines the steps needed to successfully usher information security into the strategic and operational business agenda. This report is an update to the "CISO Handbook: Presenting To The Board" report originally published on April 12, 2010.