Questions to ask your CFO
These questions will help facilitate a healthy discussion with your CFO and explore ways they can work more effectively with other executives in addressing your organization’s cyber resilience gaps and uplift program.
- Have you considered cyber risk as a part of ERM?
- As a CFO who manages the financial risk within an organization, how can you become a champion of security in the boardroom?
- How can you shift your starting point from eliminating all risks to narrowing the range of acceptable outcomes?
- How do you understand the implementation of cybersecurity hygiene? Is it more than just firewalls and authentication?
- How do you ensure cyber risk quantification and financial optimization?
- Are you confident that cyber risk needs to be addressed with a balance between mitigation and transfer? Have you considered cash flow management and risk transfer through cyber insurance?
- How are you working with the CISO and CIO/CTO to adhere to regulatory requirements such as GDPR and PCI-DSS requirements?
- How much time are you spending with the CISO and CIO to do a business review of the cybersecurity environment?
