Speaking Security in Board Language: How CISOs Can Elevate Cybersecurity from IT to Business Priority

In this episode of Threat Vector, host David Moulton speaks with Nigel Hedges, Executive General Manager of Cyber and Risk at Chemist Warehouse, about transforming cybersecurity conversations at the executive level.

Key Discussion Points:

Reframe cyber as business risk: Nigel describes cyber as "technology-enabled business risk" rather than just a technology issue

Master storytelling with analogies: Learn how to explain identity access management using train stations vs. stadiums, making complex concepts accessible to boards

Focus on materiality: Nigel limits board presentations to 20 metrics maximum and advocates for 5 minutes of content plus 5 minutes for questions

Measure engagement beyond clicks: Track not just phishing click rates, but employee reporting rates when they identify suspicious emails

Build business relationships first: Spend your first 100 days understanding both cyber risks and meeting business unit leaders with the question "How can I help you?"

What You'll Learn:

Related Resource: