Reporting to the Board: A Toolkit for CISOs
Speaker: Gus Chernitsky: Sr. GRC Security Consultant, Security and Risk Consulting (SRC)
Duration: 60 mins @10:30am AEST
Following a steady march of largescale breach crises at corporations and public entities over the past several years, business leaders and boards of directors have been put on notice that cybersecurity is a business risk and not an IT problem. Regulators and stakeholders have made their expectations clear: take action to proactively monitor and mitigate cybersecurity risk, or expect fines and legal intervention. In response to the heightened sense of urgency, boards of directors are seeking a more effective way to monitor the risks more closely, but they face significant challenges.
However, according to the National Association of Corporate Directors 2015-16 Public Company Governance Survey, 1/3 of board members are dissatisfied with the quality of cybersecurity information provided by management. Board members need accurate and easy to understand information so that they can understand cyber-risk and make the right decisions around investment. In this webinar Senior Governance & Risk Security Consultant Gus Chernitsky will share his experience communicating with boards and executive leadership about how cybersecurity can be reported to the board in a manner that lends the appropriate attention for continued investment.
By attending this webinar, you can expect to come away with:
- List of topics that you should focus on to get board’s attention
- Tips on how to prepare for your board presentation
- Practical guide to choosing correct terminology when reporting
- Some examples on what to include in your presentation