Communicating at multiple levels is one of the most powerful skills a CISO can leverage to mature security programs; however, many struggle to communicate beyond a tactical level, leaving gaps in understanding across the business. If CISOs do not tailor communication for different levels in the business, they will end up with controls that are partially implemented, misalignment of expectations, and increased risk. How can CISOs adjust what and how they communicate to different levels of the organization, so risk is understood by a board member and engineer alike?
In this panel, Colin O’Connor, COO at ReliaQuest, alongside Gopal Padinjaruveetil, CISO at Auto Club Group, on:
- Why CISOs must be able to communicate in terms of business impact, tactical implications, and specific use cases;
- Tips to adjust your communication style to make sense at three different organizational levels; and
- Real-world examples of what successful communication looks like.