Fortinet Cybersecurity Podcast · Fortinet Cybersecurity Podcast

Brass Tacks S1E05 - Quantifying Cyber Risk: A Board-Level Cybersecurity Priority

September 3, 2024·21 min·1 clip

New EU law (NIS 2) makes executives personally liable for cyber attacks—compliance is now a board-level imperative.

Brass Tacks Talking Cybersecurity, hosted by Joe Robertson with guest Mark Child from IDC research, addresses how executives and board members should understand cyber risk. The episode explains that while boards recognize cybersecurity matters, they lack the business language to discuss it. EU legislation (NIS 2, effective October) now makes senior management personally liable for cyber incidents, creating urgency. The episode explains four types of business risk from cyber attacks: operational (Maersk lost $300M in downtime from NotPetya), reputational (TalkTalk suffered brand damage for a year after data breach), compliance (hotels hit with $18.4M fine after M&A uncovered 500M compromised customer records), and financial. By translating cybersecurity into business risk terms, CISOs can better communicate with non-technical boards.

As heard by us

Board-level cyber risk explained in plain business language.

Brass Tacks treats cyber security as a boardroom concern, and that is plainly the episode's center of gravity. Joe Robertson and Mark Child focus on how CISOs can explain risk in language boards actually use, with business impact doing most of the work.

Read the full review in PlayNext →

Why you'd press play

Need to explain cyber risk to boards and executives without losing the business angle or the boardroom context?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Fortinet Cybersecurity Podcast