Selling Information Security to the Board

CHAPTER 15: DELIVERY

As soon as you have authorisation to proceed, you get to work.

Communication is at the heart of delivery, where the board is concerned. You want to give the board a regular progress report – what’s gone well, what hasn’t (keeping it simple and short, of course) and providing measurements that indicate the success of the project.

Approval, authorisation to proceed, is just the first step. A crucial step, yes, but actual delivery – on time, on budget and to specification – is even more important. It’s how you demonstrate that the board was right to trust you – and how you prepare them for your next proposal, as you take information security forward in your organisation.