How to Tell the Right Cyber-Story to Executives and Board Members
summary
Shows concrete metrics and a repeatable one‑page format: map business risks to tolerance levels, quantify impact (example: NotPetya $300M), convert technical incidents into business risks (500 vulnerabilities → data breach risk), score capabilities with a maturity framework (current cyber resilience score 25, target 42), cost and timeline a program ($15M spend, phased roadmap), and report monthly progress tied to risk and capability reductions.
AI-written summary · about
chapters (12)
- 0:00Introduction and Context
- 2:27The Communication Gap
- 4:03Understanding Executive View
- 7:02Key Questions and Metrics
- 9:44Educational Materials
- 12:03Setting Up for Success
- 14:08The Language of Risk
- 16:28Preparing the Narrative
- 18:56Closing the Gaps
- 22:04Presentation and Format
- 24:17Building a Business Case
- 25:55Summary and Action Items
related talks
40mCybersecurity Metrics Development for Board and Risk Committee Reporting
40mGetting Cybersecurity Funding from Your CEO: the 5 Critical Steps
15mFrom Risk to Return: Measuring Cybersecurity ROI with Data Analytics
52mCybersecurity as a Business Conversation
40mProtecting What Matters Most – Tools for Managing Risk
41mThe Business of Cybersecurity
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
45mBuilding Your Roadmap to Cyber Resilience – Five Things You Can Do Today