Board cyber risk reporting

The practice of presenting cyber risk to boards and audit committees, covering who speaks, how often, and how security programs are mapped to business functions and revenue.