It can be difficult for the CSO/CISO to get the board of directors to care about cybersecurity in the same way the infosec team does, and also difficult to get the cybersecurity agenda across in a way the board understands. Why? The priorities, and the language, are different. While the board is focused on profitability and risk appetite, CSOs are concerned with protecting assets and risk tolerance. Yet boards are taking an increasingly active role in cybersecurity governance, and looking to CSOs for guidance. This Survival Guide offers some advice on how to advance the CSO/CISO-board relationship, and provides some tips that CSO/ CISOs can use to make their seat at the table more secure—and more meaningful to the business.
 |
