One of the key challenges that many CISOs face is how to engage effectively with the Board to ensure they receive the information they need to support risk-informed cybersecurity decision making. Often, Board reports are either too tactical or don’t provide the actionable insights the Board needs to help support the CISO’s agenda. Join this lightly moderated session session to share your experiences and ideas on effective communication with your board.

There are multiple approaches for communicating the business value of cybersecurity and none of them offer a single "best" way. All are relevant to different contexts. This presentation will discuss the characteristics of common approaches such as RO(S)I, price-performance analysis, outcome-driven approach, etc., and provide guidance on how to select the appropriate approach based on context.

In a world of change and uncertainty, some are (again) predicting the demise of the centralized CISO role. However, more likely is another functional responsibility split driven by digitalization. Some CISOs will take these “business executive” roles, while others will continue in IT-oriented and operational tasks. Join this session to discuss: What type of CISO are you? Where will you excel? What's next for the role?

This presentation will share how behavioral economics can help security and risk leaders understand how to influence user behavior and improve security culture.