How to Engage with Non-Technical Business Leaders

Defense in Depth

All links and images for this episode can be found on CISO Series

How do you talk to non-technical business leaders about cybersecurity? It's a concern, it's a risk, they want to know so they can make logical business decisions. How do you help?

Check out this post for the discussions that are the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Our guest is Sara Hall, deputy CISO, MassMutual.

Thanks to our podcast sponsor, HYAS

"Better production environment security starts with visibility. After all, how can you protect your most valuable asset if you don’t know A: what’s expected and B: when something’s happening that isn’t expected? This is why HYAS Confront monitors traffic to alert you to anomalies, letting you address risks, threats, and changes, while blocking infiltrations before they become successful attacks. Don’t just react, take your security back with HYAS. Visit HYAS.com"

In this episode:

• How do you talk to non-technical business leaders about cybersecurity?
• It's a concern, it's a risk, they want to know so they can make logical business decisions. How do you help?
• Does storytelling and/or other strategies work?
• How do you have a risk discussion while also avoiding FUD - fear, uncertainty, and doubt?