Back Feeds2.Feedburner

How board members think about cyber risk and what CISOs should tell them

Feeds2.Feedburner •Help Net Security • November 26, 2025

In this Help Net Security video, Jonathan Trull, EVP & CISO at Qualys, discusses which cybersecurity metrics matter most to a board of directors. Drawing on more than two decades in the field, he explains how boards think their duty to oversee risk and how CISOs can present information in a way that supports that duty. Jonathan outlines why boards want to understand risk appetite, how loss scenarios shape those discussions, and why no … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Insights on Cyber Risk Communication for Boards Cybersecurity leaders are focusing on how to effectively communicate cyber risk to board members. Rishi Kaushal from Entrust emphasizes linking technical aspects like cryptography to business outcomes, while Jonathan Trull from Qualys discusses the importance of presenting metrics that align with the board's risk oversight duties. Both articles highlight the need for CISOs to tailor their communication strategies to better inform board decisions regarding cyber risk. 3 sources 22

Extracted Entities

Companies (1)

Qualys