Security for the board, not the bored
It's always easier to appreciate a story when it's in your own language. That's why they invented movie subtitles. Audience is important, and no company was ever built just to support its information security team. It's always the other way around: security is a business function created to support business strategy and objectives. Most security objectives do support business objectives, but it can get frustrating if security owners can't talk about what they do in a language business owners care about. GQM, Logic Modeling, and the Business Model Canvas are three readily available tools every security team should consider the next time they need to talk security as a strategic business enabler.
Sign up for CIO Asia eNewsletters.