Can you share any tips or advice for CISOs looking to develop their storytelling skills for more effective board presentations?

I agree with the "keeping it simple" approach. We aim to make our reporting action-oriented. Reporting a bunch of stats and metrics without context or actionable insights doesn't help the cause. We need to ensure that our presentations lead to actionable outcomes.

It's essential to understand the board and present information in a way that aligns with how other departments report. Analogies can be effective, but they should be used judiciously. The head of tax, for example, isn't going to use storytelling to convey their points. It's crucial not to try to be overly creative or "cute" in these presentations. The key is to maintain a level of professionalism and clarity that matches the board's expectations.