{"id":88336,"date":"2019-01-31T11:15:24","date_gmt":"2019-01-31T19:15:24","guid":{"rendered":"https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/?p=88336"},"modified":"2023-05-15T22:59:29","modified_gmt":"2023-05-16T05:59:29","slug":"ciso-series-talking-cybersecurity-with-the-board-of-directors","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/01\/31\/ciso-series-talking-cybersecurity-with-the-board-of-directors\/","title":{"rendered":"CISO series: Talking cybersecurity with the board of directors"},"content":{"rendered":"

In today\u2019s threat landscape, boards of directors are more interested than ever before in their company’s cybersecurity strategy. If you want to maintain a board\u2019s confidence, you can\u2019t wait until after an attack to start talking to them about how you are securing the enterprise. You need to engage them in your strategy early and often\u2014with the right level of technical detail, packaged in a way that gives the board exactly what they need to know, when they need to know it.<\/p>\n

Cyberattacks have increased in frequency and size over the years, making cybersecurity as fundamental to the overall health of the business as financial and operational controls. Today\u2019s boards of directors know this, and they are asking their executive teams to provide more transparency on how their company manages cybersecurity risks. If you are a technology leader responsible for security, achieving your goals often includes building alignment with the board.<\/p>\n

Bret Arsenault, corporate vice president and chief information security officer (CISO) for Microsoft, was a recent guest on our CISO Spotlight Series<\/a>, where he shared several of his learnings on building a relationship with the board of directors. We\u2019ve distilled them down to the following three best practices:<\/p>\n