Jordan Ellis
CISO at a Fortune 500 insurer
Posted 3 days ago ·
I stopped presenting risk heat maps to our board.
Not because they're wrong. Because nobody has ever made a decision from one.
Now every quarter I bring three things:
→ The one risk I'd fund tomorrow, and what it costs
→ The one I'm choosing to accept, and why
→ What changed since last time
The meetings got shorter. The budget conversations got easier.
Boards don't need more color. They need a recommendation.