As a key mitigator of risk to the viability of the business, the security function is becoming an established contributor to Executive Management and Board of Directors decision making.
As a result, key information provided from security leadership has never been more consequential.
The challenge is many security leaders still speak in terms of technology risks and specific vulnerabilities and establish policies around those risks that result in a lack of alignment to business priorities. As a result, the security function runs the risk of being viewed as a hindrance to the business and establishing competing priorities rather than being a valuable contributor.
