Minneapolis CIO Inner Circle

Becoming a cyber-resilient organization requires ownership and responsibilities to be expanded across the C-suite and board, changing the way that cybersecurity challenges are addressed at all levels of the organization. CIOs need to embrace zero trust security and adjust their board engagement approach to get the appropriate level of support and guidance on cybersecurity initiatives, which includes: messaging for impact, evidencing a clear understanding of the organization’s overall risk exposure, outlining what assumed risks the organization is taking on and the trade-offs, and pursuing further secure digital transformation efforts in benefit of the organization’s business initiatives, stability, and future growth.

In this interactive conversation, CIOs will share strategies for increasing cyber and business resilience with board buy-in.

Discussion topics include:

• How zero trust architecture secures users, workloads, and IoT/OT devices by addressing critical security shortcomings of routable networks.
• Gaining confidence from the board on the cybersecurity oversight and forward direction
• Articulating cyber risk posture, controls, and mitigation strategies in place, with board-level terminology
• Proving how building cyber resilience also drives business growth

Zero Trust Security and Business Benefits

• How have you implemented the principles of zero trust in your organization (if applicable), and what benefits have you seen from this approach?
• If you have already implemented zero trust security measures, what were some of the biggest challenges you faced, and how did you overcome them?
• Based on your experience in building roadmaps, how can CIOs build a zero trust roadmap and implementation plan that aligns with their organization’s overall security strategy, and what are some key factors to consider when developing these plans?
• How did you approach the business with change? How did they embrace it?

Articulating Cyber Risk Posture and Board Engagement

• What role do board members play in managing cyber risk, and how can CIOs work with them to ensure that cyber risks are effectively managed and mitigated?
• How have you communicated your cyber risk posture, mitigating controls, and remediation strategies to your board? What challenges did you face and how did you overcome them?
• What strategies have you used to gain confidence from the board on cybersecurity oversight and direction, and how can these strategies be tailored to the needs of different types of organizations?
• What metrics and KPIs have you used to measure the effectiveness and demonstrate the business case of cyber resilience initiatives, and how have you effectively communicated these to the board?