Leadership Management and Communications

Now, we’ll move on to what I would consider the most important component of your governance program. Here, you need to translate everything that is occurring within your cybersecurity program for the organization back to the executive leadership team and board of directors (if applicable). This won’t be an easy task since the audience you will be communicating with will primarily be non-cybersecurity experts. Because of this, there will be a need for continuous education. Understanding your audience will be critical as you look to build your content and send communications and reports to these teams.

As you build your content, make sure you are providing relevant data to your executive leadership team and the board of directors. A baseline is provided below in the Building Reports section, but you may need to adjust to better support what is expected from the executive leadership team and board of directors. Don’t just...