When Dave MacKinnon, CSO of cyber-resiliency firm N-able, first spoke to a board member, he was “scared to death.” I don’t speak business like they do, he remembers thinking, as he discussed cyber threats with the company’s freshly spun-up cybersecurity committee, a subset of the board that came together about five years ago. Since then, the interactions have thankfully gotten less scary; every quarter, he now has 90 minutes with the cybersecurity committee, and he has learned a few things about how to talk to stakeholders. That’s an important skill these days, as a new report finds CISOs are getting the boardroom face-time, but business leaders still want higher-quality information on the impact of evolving threats. Given recent SEC regulations requiring boards of directors to oversee cybersecurity, CISOs have become important boardroom guests, presenting on topics like security controls and current threats. MacKinnon’s advice for CSO’s pressed for time with their boards.—BH |