How to hack your board (and finally get your cyber budget approved)

You may be securing your organisation, but are you securing the Board’s confidence?

CISOs and cyber executives often face significant frustration: despite escalating threats, their cyber budgets and strategic proposals frequently stall at Board level. Why? Because effectively communicating cybersecurity to Boards requires more than technical expertise—it demands framing cyber as a strategic governance issue.

Boards now face unprecedented scrutiny from regulators, shareholders, and the public. Landmark cases like ASIC v RI Advice and the recent ASIC enforcement against FIIG Securities for ""systemic and prolonged cybersecurity failures"" reinforce that directors' duties explicitly encompass cyber oversight. Regulatory standards such as CPS 234 and CPS 230 further mandate explicit Board accountability for cybersecurity and operational resilience. For cyber leaders, understanding this governance landscape is essential to aligning cybersecurity objectives with Board priorities.

This session cuts through regulatory complexity and governance jargon, offering practical guidance specifically for cyber executives. Learn how Boards evaluate cyber risk, what motivates director decision-making, and how to prepare Board papers that clearly connect cybersecurity investments to Board obligations, organisational risk appetite, and strategic objectives.