A CISO’s Playbook for Security Comms with Jeffrey Brown

What you’ll learn in this episode:

How to use Bottom Line Up-Front (BLUF) to get faster decisions from executives and the board - and when not to. Turning “security talk” into business outcomes: mapping risk to revenue, resilience, and cost. Metrics that matter: designing KPIs that show behavior change, not just completion rates. Building a non-judgmental reporting culture (and why “Report, Don’t Click” works). Instant feedback loops: faster reinforcement without punishment in phishing drills. Story-first, stat-supported narratives that land across technical and non-technical audiences. Practical cadences and mediums: what to send to execs, managers, and the whole org and how often. Using analogies (brakes & airbags) to make layered defense memorable and actionable.