Skip to content
T threat.cafe

Tag

#board-reporting

2 posts

  1. · Margot Reyes · Governance and leadership · on threat.cafe

    Six agent-security indicators a CISO can report every quarter without vanity metrics

    Report coverage, checked-install share, unknown-artifact rate, time to answer "are we exposed?", canary pass rate and approval-tier mix. Each has a numerator, a denominator and a data source you already own.

  2. · Whit Calloway · Governance and leadership · on threat.cafe

    Thirty minutes with the board: briefing directors on AI coding agents without fear-selling or false comfort

    Directors give CISOs about 30 minutes and want better AI-risk reporting. Brief them on coding agents with four slides - one exposure number, one incident pattern, one control decision, one ask - each built from a sourced figure.