Abstract

Out the Technology Just because you shouldn't talk about technology doesn't mean technology plays no role. There are several techniques to abstract out the technology. As discussed above, maturity works well. You can discuss "perimeter security" that addresses unauthorized entry into computers without mentioning firewalls. Another example is a car company that reports lost cars when IT causes a failure of the production line. It doesn't report IT downtime, because the board cares about cars, not IT (see "Two Simple Techniques to Facilitate Business Alignment").

Links

• https://www.gartner.com/en/documents/3238219/how-to-build-an-effective-cybersecurity-and-technology-r

Citation

Proctor, P.E., Wheatman, J., McMillan, R., 2017. Gartner Research Note: How to Build an Effective Cybersecurity and Technology Risk Presentation for Your Board of Directors (Gartner Research Note No. G00297468).