In the meantime, however, CISOs need to acknowledge that is important to the board. This means not only showing how the cybersecurity program prevents bad things from happening. But perhaps more importantly, how cybersecurity improves the enterprise’s ability to take risks effectively. Even better, how to use cybersecurity as a competitive advantage. 

Gartner recommends CISOs get ahead of the change to promote and support cybersecurity to the board and establish a closer relationship to improve trust and support.

In this PodChats for FutureCISO, Alex Tilly, head of Threat Intelligence, APJ at Secureworks, offers his take on how CISOs can take cybersecurity to the board, and secure buy-in in the process.

1.                  Define for us what is a security culture? Why and how important is having a security culture in today's digital world? 

2.                  Who should lead the adoption of a security culture in the organisation?

3.                  Gartner predicts that by 2026, someone sitting on the board will likely have cybersecurity expertise. In the here and now, however, how would you describe the relationship between CISOs and board? Do they recognise that they need each other? 

4.                  From the CISO's perspective, can you name steps that the CISO needs to work on to build a foundational relationship with board? What works and what hasn't?

5.                  Can you share some tips for creating a board presentation agenda that will help CISO establish his or her role as a trusted and credible leader?

6.                  Conversely, what must the board do to help establish/acquire the trust of the CISO (and the rest of the executive suite)?

7.                  Advise to boards, security professionals and C-suite as regards to the cyber threat landscape in 2023 and beyond.