What To Report

The video discusses the evolving role of cybersecurity in boardrooms, highlighting the increasing need for cybersecurity expertise among board members. It explores how discussions have shifted from technical metrics to risk-based conversations. The role of the CISO is examined, emphasizing the importance of strategic and leadership skills. The video also covers the significance of cybersecurity in critical infrastructure sectors and the need for CISOs to advocate for cybersecurity within organizations. Finally, it addresses board involvement in cybersecurity exercises and future trends in the field.

What percentage of companies currently lack a board member with cybersecurity expertise?

• 60%

• 50%

• 40%

• 70%

How often is it suggested that the CISO should present to the board?

• Once a year

• Twice a year

• Once a quarter

• Once a month

Why is it important for the full board to have visibility of the cybersecurity leader?

• To limit their influence

• To ensure they are following orders

• To build rapport and understand the program

• To reduce their salary

Which sectors are mentioned as critical infrastructure in the discussion?

• Telecommunications, Media, Entertainment

• Energy, Financial Services, Transportation

• Technology, Agriculture, Manufacturing

• Healthcare, Education, Retail

What is a common driver for companies to enhance their cybersecurity expertise?

• Recent cybersecurity events

• Increased marketing efforts

• New product launches

• Employee turnover

What is a key skill that the role of the CISO is evolving to include?

• Advanced coding skills

• Business acumen

• Graphic design

• Public speaking

What is one challenge CISOs face when reporting to the board?

• Too much technical reporting

• Insufficient data

• Overly simplified reports

• Lack of technical knowledge

What role does the CISO play in relation to the CIO?

• They have a strong relationship but focus on different areas

• They report directly to the CIO

• They have no interaction

• They are always in conflict

What is one way CISOs can advocate for their role within a company?

• By focusing solely on technical skills

• By avoiding board meetings

• By networking and translating technical reports into business value

• By limiting communication with other executives

What is a benefit of having third-party validation in cybersecurity?

• It provides an emotional response

• It eliminates the need for internal audits

• It reduces costs

• It validates internal efforts and provides an external perspective