© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022
R. LeirvikUnderstand, Manage, and Measure Cyber Riskhttps://doi.org/10.1007/978-1-4842-7821-5_8

8. Report Upward

Ryan Leirvik1  
Arlington, VA, USA

How do I report to the board? This is a common question in the security community. It should have one simple answer. Whatever the board requests. However, it’s not that simple. Many board members are unclear about what questions to ask. Almost all board members have various levels of cybersecurity knowledge or insights; naturally, they typically have deep expertise in areas other than cybersecurity. As with many people at large, many board members do not have the deep technical experience needed to ask probing ...

Get Understand, Manage, and Measure Cyber Risk: Practical Solutions for Creating a Sustainable Cyber Program now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.