--- title: How to Get Your Board to Care About Security Before a Breach description: Boards don't fund security because it's important — they fund defensible decisions. This piece by a security leader explains why traditional CISO board... canonical: https://daily.dev/posts/how-to-get-your-board-to-care-about-security-before-a-breach-gmevlntol twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to Get Your Board to Care About Security Before a Breach | daily.dev og:description: Boards don't fund security because it's important — they fund defensible decisions. This piece by a security leader explains why traditional CISO board... og:url: https://daily.dev/posts/how-to-get-your-board-to-care-about-security-before-a-breach-gmevlntol og:image: https://api.daily.dev/og/posts/GMEVLnTol.png og:image:alt: How to Get Your Board to Care About Security Before a Breach og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How to Get Your Board to Care About Security Before a Breach **[Aikido Security](https://daily.dev/sources/aikido-security)** · 14 min read · 0 upvotes · 0 comments ## Summary Boards don't fund security because it's important — they fund defensible decisions. This piece by a security leader explains why traditional CISO board presentations fail, how boards actually think about risk (like insurance, not ROI), and what metrics and framing actually resonate. Key advice includes shifting from prevention thinking to resilience thinking, replacing vulnerability volume metrics with risk exposure trends and blast radius reduction, using proof-of-concept evaluations as bounded business experiments, and packaging security asks as clear tradeoffs with defined success criteria. Common board objections (cost, compliance, existing tools) are addressed with reframing strategies rather than rebuttals. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISOs: Align cyber risk communication with boardroom psychology](https://daily.dev/posts/cisos-align-cyber-risk-communication-with-boardroom-psychology-ccbbgx5z3) · CSO Online · 0 upvotes · 0 comments - [CISOs, CIOs and Boards: Bridging the Cybersecurity Confidence Gap](https://daily.dev/posts/cisos-cios-and-boards-bridging-the-cybersecurity-confidence-gap-r5m0fdppg) · Security Boulevard · 0 upvotes · 0 comments - [3 ways CISOs can win over their boards this budget season](https://daily.dev/posts/3-ways-cisos-can-win-over-their-boards-this-budget-season-znynv6mmm) · CSO Online · 0 upvotes · 0 comments - [CISOs vs. Boards: Myth or Misunderstanding?](https://daily.dev/posts/cisos-vs-boards-myth-or-misunderstanding--ghkzjpjnz) · Dark Reading · 0 upvotes · 0 comments - [Communicating Cyber Risk to the Board: Executive Reporting Best Practices](https://daily.dev/posts/communicating-cyber-risk-to-the-board-executive-reporting-best-practices-opnancdxu) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#compliance](https://daily.dev/tags/compliance) [View this post on daily.dev](https://daily.dev/posts/how-to-get-your-board-to-care-about-security-before-a-breach-gmevlntol) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to Get Your Board to Care About Security Before a Breach","url":"https://daily.dev/posts/how-to-get-your-board-to-care-about-security-before-a-breach-gmevlntol","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-get-your-board-to-care-about-security-before-a-breach-gmevlntol"},"datePublished":"2026-03-31T12:25:36.445Z","dateModified":"2026-03-31T12:28:01.595Z","description":"Boards don't fund security because it's important — they fund defensible decisions. This piece by a security leader explains why traditional CISO board...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8dfe3a70b5c45fb6a6647f7b2880b498?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8dfe3a70b5c45fb6a6647f7b2880b498?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Aikido Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Aikido Security","logo":"https://media.daily.dev/image/upload/s--vJDqDYv_--/f_auto,q_auto/v1774959928/logos/aikido-security?_a=BAMAMiWQ0","url":"https://daily.dev/sources/aikido-security"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-get-your-board-to-care-about-security-before-a-breach-gmevlntol","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,compliance","timeRequired":"PT14M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Aikido Security","item":"https://daily.dev/sources/aikido-security"},{"@type":"ListItem","position":3,"name":"How to Get Your Board to Care About Security Before a Breach"}]} ```