Report Upward
Ryan Leirvik · Apress eBooks · 2022
How do I report to the board? This is a common question in the security community. It should have one simple answer. Whatever the board requests. However, it’s not that simple. Many board members are unclear about what questions to ask. Almost all board members have various levels of cybersecurity knowledge or insights; naturally, they typically have deep expertise in areas other than cybersecurity. As with many people at large, many board members do not have the deep technical experience needed to ask probing technical questions. With this in mind, the answer to the preceding question is refined to the following: whatever the board needs to know to provide a sufficient level of oversight.