Fortinet Cybersecurity Podcast · Fortinet Cybersecurity Podcast

Brass Tacks S1E01 - Onboarding the Board with Cybersecurity

·18 min

The conversation starts at the boardroom door. Joe Robertson argues that cybersecurity has to be translated into the language of risk management, because executives and directors are making decisions about the company, not the tool stack. He frames the show around that point. Wolfgang Bitomsky joins as Chief Information Officer at FCC Environment, a global waste-management company operating in both business-to-business and business-to-consumer settings, and he describes security as an organization-wide concern rather than an IT silo. That distinction matters. When the discussion turns to new regulatory requirements, Bitomsky says the organization has to fund a gap analysis, understand what still needs to be done, and prepare people for the gaps that show up. He also ties the work to awareness training. For him, the change is operational as much as technical, because the requirements affect production sites and ordinary staff, not just the security team. The host keeps pressing on how to make non-technical leaders understand the stakes. Bitomsky's answer is direct: speak the board's language and frame the issue around risk and opportunity. That means showing what the organization stands to gain, what it stands to lose, and what level of risk it can live with. He also leaves room for incomplete answers. Instead of demanding a perfect yes or no, the board may decide to accept one risk, defer another, or require a fix on a different timeline. That gray area is treated as normal business practice. The exchange returns to communication. Bitomsky says people coming from cybersecurity have to change how they explain themselves when they sit in front of the board. The show keeps the tone steady and pragmatic throughout. It is less interested in scare tactics than in getting organizations ready. By the close, the message is simple. Cybersecurity belongs on everyone's agenda because a cybersecurity incident can happen to anyone at any time, and preparation is the key.

As heard by us

Board-level cyber guidance that frames security as risk, funding, and organizational decision making.

Brass Tacks keeps cybersecurity at the board level, where the real work is about risk, opportunity, funding, and the choices leaders have to make.

Read the full review in PlayNext →

Why you'd press play

Need to brief the board without sounding technical?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify