Tag

CISO Board Reporting

Covers strategies and frameworks for CISOs to communicate cybersecurity risk, incidents, and program performance to the board of directors. Articles include reporting templates, key metrics, and techniques for translating technical security data into business-relevant insights that drive informed decision-making at the board level.

posts

Board-Level Cybersecurity Awareness

Board-Level Cybersecurity Awareness: A 2026 Guide

The SEC Changed Everything — Most Boards Still Haven't Caught Up In July 2023, the SEC adopted rules requiring public companies to disclose material cybersecurity incidents within four business days and to describe their board's oversight of cyber risk annually. Since then, I've reviewed dozens

Carl B. Johnson Aug 20, 2019 7 min read