Solutions / Strategy and reporting

The board wants a security strategy. You have a blank page.

You know what's wrong. Turning it into a plan people will fund is the hard part.

Ask your Virtual CISO what matters most, and why
Get a prioritized plan built from your own risks, gaps and incidents
Refine it in chat until it reads like yours

The board meeting is Thursday. The report doesn't exist.Is security getting better or worse? Can you answer that?