Selling Information Security to the Board

CHAPTER 5: SELF-PREPARATION: BE CREDIBLE

As an information security leader inside your organisation, you have a unique opportunity to establish yourself with senior management in a way that is not open to any outsider.

Management will always listen to their trusted advisers. They won’t always follow their advice, but they will usually pay attention when they raise an issue, and will usually be interested to find out why they need to do something about it.

The trusted adviser, in other words, will almost always get through the first two stages in the AIDA sequence by default.

How does the information security professional become a trusted adviser?

A basic facility with business language, together with the requisite soft skills, is the foundation ...