PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Emily Heath’s 5 Key Questions CISOs Should Ask Before Board Meetings

wiz.io | blog | #risk-management | #security-leadership | #best-practices | #ciso | #board-communication | #governance
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Emily Heath shares five questions CISOs should ask before board meetings—starting with identifying the organization's crown jewels—to make security updates resonate with every director.
Published
Collected

Related coverage

blog · aikido.dev
How to Get Your Board to Care About Security (Before a Breach Forces the Issue)
Boards don't fund security because it's important—they fund it when decisions feel rational, bounded, and defensible. Frame security as decision support, not dashboards and heat maps.
blog · netspi.com
The Evolution of the Chief Risk Officer
Risk Neutral CEO Jeff Sauntry on the Chief Risk Officer role's evolution, the five enterprise risk categories, and how security leaders can translate technical risk into board-level language.
blog · netspi.com
Challenges and Keys to Success for Today’s CISO from the Former CISO at the CIA
Former CIA CISO Robert Bigman recounts building the agency's CISO role from scratch, why governance and policy work were core duties, and how to recover from mistakes in high-stakes environments.
blog · netspi.com
Where the CISO Reports
Since the role of the Chief Information Security Officer (CISO) and how he or she reports has a major impact on security and risk, I think it’s interesting to look at how different organizations have structured the position. With that said, there is very little consistency other than a correlation with the industry vertical’s understanding of IT risk.
blog · wiz.io
What’s New in Wiz Service Catalog: Smarter Discovery, Governance, and Service-Level Context
Discover services via Backstage, ServiceNow, and dynamic rules. Wiz Service Catalog adds service-level identity, compliance, and automated posture enforcement.
blog · wiz.io
CISOs share their top 7 strategies for gaining C-Suite buy-in
CISOs from Blackstone, Red Ventures and New American Funding share C-suite buy-in tactics: speak business language, focus on governance, clarify risk ownership and build stakeholder ties.
Back