Cost and value drive every business outcome, except cybersecurity (until now). Measuring cybersecurity value delivery by establishing consistent outcome-driven metrics accrues many benefits and helps enhance decision-making and board governance. In this session, senior director analyst, Richard Addiscott, will share an approach to help CIOs and CISOs guide a board toward apt and defensible cybersecurity investments and execution.

The human element is the most prominent contributor to data breaches and legacy approaches delivering curriculum-based, awareness-centric programs are no longer effective. CIOs and CISOs must look beyond merely raising 'security awareness' and embed a contextually-appropriate security culture for their organization. Join this session to learn how to build and deliver an effective security behavior and culture change program or SBCP.

Presenting security to board of directors is becoming a requisite part of IT leadership. Attendees to this session will be able to ask about best practices in articulating the security posture of their organizations to the executive leaders.