In today’s environment, many businesses are actually technology businesses because their business models cannot function without technology. We often receive feedback from board members, stating they do not have a sufficient understanding of the IT risks facing their organizations.

When directors are briefed on IT matters, do they fully understand the message? In this issue of Board Perspectives: Risk Oversight, we outline three contexts for conducting IT briefings with the board of directors. Each context provides directional insights for the chief information officer and the chief information security officer in organizing delivery of the briefing.