INE Security Enables CISOs to Secure Board Support for Cybersecurity Training

The article argues that CISOs should position cybersecurity training as a strategic investment to win board support, emphasizing the human element in breaches, measurable ROI (e.g., savings from incident response readiness), and regulatory/commercial benefits. It references the Capital One 2019 breach and Maersk’s 2017 NotPetya incident as examples underscoring the need for cloud/security hygiene and employee training. The piece outlines communication tactics—speaking in business outcomes, leveraging credible data, using real-world examples, stressing compliance, and framing competitive advantage—while addressing common objections around cost and time with modular, targeted training approaches.