carlota / showmethemoney

These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and the executives/business owners.

practical-secops

Download the Excel files and customize as you need.

Documents were orginally targeted to IT/Security personnel in smaller organizations (sub-100 employees) trying to bridge the gap with the business side and/or grow into a security management or leadership role. Security experts have also found these documents a good base for communicating with the business side and creating meaningful metrics.

I appreciate all the feedback from CISOs, vCISOs, CIOs and other IT/Security folks! I'm glad this work is helping you communicate better with your teams!