How to Communicate Security to the Board
Effectively communicating with company executives has always been a challenge for us in information security. Sometimes I felt like a complete stranger in a land where nobody spoke my language. These stressful meetings inevitably ended up in two outcomes, neither desirable: executives either agreed with our recommendations without truly understanding the needs (a.k.a. “alright kids, here is some money, now go buy some toys and leave us alone”)—downright rejection. Much of these communication issues can be blamed on how security professionals craft ...