Problem Statement
What should cybersecurity reports to the board primarily communicate?
Explanation
Reports to the board should translate technical risk into business language. They summarize key metrics such as incident volume, control performance, and compliance status. The goal is to show how cybersecurity supports enterprise resilience and strategy.
