With the rate of cyberattacks increasing and increasing, the need for a boardroom expert in information security is becoming a top business priority. There are plenty of cybersecurity executives who are board-ready and eager to be appointed to this prestigious post. A cybersecurity executive on the boardroom can provide valuable expertise to both management and investors.
Unfortunately, many leaders of companies view cyber security more as an IT concern www.greatboardroom.com/boardroom-information-security-questions-your-board-will-ask/ than a strategic issue of risk management. This is a serious mistake. As an executive in the business world, it’s your fiduciary duty to protect your business and its assets. This includes minimizing risks to you and your family.
The best way to accomplish this is to educate above and beyond your IT department. This requires a regular dialogue with the C-suite as well as present security concepts in a way that is simple to comprehend, and without “geekspeak.”
When discussing cybersecurity in the boardroom, a CISO must be willing to listen and discuss any concerns of potential board members. This allows the CISO to evaluate the risk and find a way to weigh them against the desired business benefits of the proposed strategy.
It is also vital that board members are aware of how to reduce their own risk. This includes checking regularly your email and internet browser history. It is also recommended that they utilize a device that is specifically designed specifically for this purpose, to access the board portal of the company, and not a device they use for Facebook or online shopping. CISOs should also ensure that board members are part of the regular security training offered to all employees.