Understand, Manage, and Measure Cyber Risk: Practical Solutions for Creating a Sustainable Cyber Program

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022

R. LeirvikUnderstand, Manage, and Measure Cyber Riskhttps://doi.org/10.1007/978-1-4842-7821-5_8

8. Report Upward

Ryan Leirvik¹  

(1)

Arlington, VA, USA

 

How do I report to the board? This is a common question in the security community. It should have one simple answer. Whatever the board requests. However, it’s not that simple. Many board members are unclear about what questions to ask. Almost all board members have various levels of cybersecurity knowledge or insights; naturally, they typically have deep expertise in areas other than cybersecurity. As with many people at large, many board members do not have the deep technical experience needed to ask probing ...