How to Talk to a Board so the Board Will Talk Back
summary
Most organizations present security to the board sparsely — some only see the full board once a year — so establish onboarding for directors, build a personal trust relationship, and run tabletop exercises that include directors (sometimes without warning). Secure high‑value directors with MFA for board members and vendor‑led assessments; benchmark using external pen tests/bug bounty results. Tell a story first, keep data for questions, and use cyber‑insurance services for exercises since policies often don’t pay out.
AI-written summary · about
chapters (11)
- 0:00Start
- 2:44Board Members
- 5:42Security Leads
- 8:18Cyber Risk Corporate Governance
- 9:45Cyber Risk Oversight
- 13:33How Are You Organized?
- 19:47Formal Board Presentations
- 21:15Tell A Story...
- 26:32Questions for the Board
- 26:48Board Actions
- 29:00Managing Gatekeepers
related talks
51mDo Better: Board-Level Accountability in Cybersecurity
22mThe CISO’s Guide to Securing a Board Seat
49mCybersecurity in the Boardroom - The Impact of the Latest SEC Proposal
49mHow to Create a Breach-Deterrent Culture of Cybersecurity, from Board Down
40mGetting Cybersecurity Funding from Your CEO: the 5 Critical Steps
53mTake The Helm: Guidance For...
28mHow to Tell the Right Cyber-Story to Executives and Board Members
15mTelling Hard Truths to Impact Change in Cybersecurity